CVE-2020-5859

HIGH

F5 BIG-IP 15.0.0-<15.0.1.1 - Denial of Service via HTTP/3 Message Parsing

Title source: llm

On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0089

EPSS Percentile 75.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Status published

Products (11)

f5/big-ip_access_policy_manager 15.0.0 - 15.0.1.1

f5/big-ip_advanced_firewall_manager 15.0.0 - 15.0.1.1

f5/big-ip_analytics 15.0.0 - 15.0.1.1

f5/big-ip_application_acceleration_manager 15.0.0 - 15.0.1.1

f5/big-ip_application_security_manager 15.0.0 - 15.0.1.1

f5/big-ip_domain_name_system 15.0.0 - 15.0.1.1

f5/big-ip_fraud_protection_service 15.0.0 - 15.0.1.1

f5/big-ip_global_traffic_manager 15.0.0 - 15.0.1.1

f5/big-ip_link_controller 15.0.0 - 15.0.1.1

f5/big-ip_local_traffic_manager 15.0.0 - 15.0.1.1

... and 1 more

Published Mar 27, 2020

Tracked Since Feb 18, 2026