CVE-2020-5926

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing…

published August 26, 2020

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01044 · 63.8th percentile
Published
2020-08-26T15:43Z
EPSS history
Timeline
  • 26 AUG 15:43Z
    In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing…
    cvelistv5