Vulnerabilities > CVE-2020-27725 - Memory Leak vulnerability in F5 products

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

CWE-401

NVD

Published: 2020-12-24

Updated: 2021-07-21

Summary

In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with access to those services can trigger this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Global Traffic Manager 12.1.0 F5 BIG IP Global Traffic Manager 12.1.1 F5 BIG IP Global Traffic Manager 12.1.2 F5 BIG IP Global Traffic Manager 12.1.3 F5 BIG IP Global Traffic Manager 12.1.3.1 F5 BIG IP Global Traffic Manager 12.1.3.2 F5 BIG IP Global Traffic Manager 12.1.3.3 F5 BIG IP Global Traffic Manager 12.1.3.4 F5 BIG IP Global Traffic Manager 12.1.3.5 F5 BIG IP Global Traffic Manager 12.1.3.6 F5 BIG IP Global Traffic Manager 12.1.3.7 F5 BIG IP Global Traffic Manager 12.1.4 F5 BIG IP Global Traffic Manager 12.1.4.1 F5 BIG IP Global Traffic Manager 12.1.4.1.0.97.6 F5 BIG IP Global Traffic Manager 12.1.4.2 F5 BIG IP Global Traffic Manager 11.6.1 F5 BIG IP Global Traffic Manager 11.6.2 F5 BIG IP Global Traffic Manager 11.6.3 F5 BIG IP Global Traffic Manager 11.6.3.1 F5 BIG IP Global Traffic Manager 11.6.3.2 F5 BIG IP Global Traffic Manager 11.6.3.3 F5 BIG IP Global Traffic Manager 11.6.3.4 F5 BIG IP Global Traffic Manager 11.6.4 F5 BIG IP Global Traffic Manager 15.0.0 F5 BIG IP Global Traffic Manager 15.0.1 F5 BIG IP Global Traffic Manager 15.0.1.0.33.11 F5 BIG IP Global Traffic Manager 15.0.1.0.48.11 F5 BIG IP Global Traffic Manager 15.0.1.1 F5 BIG IP Global Traffic Manager 15.0.1.2 F5 BIG IP Global Traffic Manager 15.0.1.3 F5 BIG IP Global Traffic Manager 15.0.1.4 F5 BIG IP Global Traffic Manager 15.1.0 F5 BIG IP Global Traffic Manager 15.1.0.1 F5 BIG IP Global Traffic Manager 15.1.0.2 F5 BIG IP Global Traffic Manager 15.1.0.3 F5 BIG IP Global Traffic Manager 15.1.0.4 F5 BIG IP Global Traffic Manager 15.1.0.5 F5 BIG IP Global Traffic Manager 13.1.0 F5 BIG IP Global Traffic Manager 13.1.0.0 F5 BIG IP Global Traffic Manager 13.1.0.1 F5 BIG IP Global Traffic Manager 13.1.0.2 F5 BIG IP Global Traffic Manager 13.1.0.3 F5 BIG IP Global Traffic Manager 13.1.0.4 F5 BIG IP Global Traffic Manager 13.1.0.5 F5 BIG IP Global Traffic Manager 13.1.0.6 F5 BIG IP Global Traffic Manager 13.1.0.7 F5 BIG IP Global Traffic Manager 13.1.0.8 F5 BIG IP Global Traffic Manager 13.1.1 F5 BIG IP Global Traffic Manager 13.1.1.1 F5 BIG IP Global Traffic Manager 13.1.1.2 F5 BIG IP Global Traffic Manager 13.1.1.3 F5 BIG IP Global Traffic Manager 13.1.1.4 F5 BIG IP Global Traffic Manager 13.1.1.5 F5 BIG IP Global Traffic Manager 13.1.2 F5 BIG IP Global Traffic Manager 13.1.3 F5 BIG IP Global Traffic Manager 13.1.3.1 F5 BIG IP Global Traffic Manager 13.1.3.2 F5 BIG IP Global Traffic Manager 13.1.3.3 F5 BIG IP Global Traffic Manager 13.1.3.4 F5 BIG IP Global Traffic Manager 14.1.0 F5 BIG IP Global Traffic Manager 14.1.0.1 F5 BIG IP Global Traffic Manager 14.1.0.2 F5 BIG IP Global Traffic Manager 14.1.0.2.0.45.4 F5 BIG IP Global Traffic Manager 14.1.0.2.0.62.4 F5 BIG IP Global Traffic Manager 14.1.0.3 F5 BIG IP Global Traffic Manager 14.1.0.3.0.79.6 F5 BIG IP Global Traffic Manager 14.1.0.3.0.97.6 F5 BIG IP Global Traffic Manager 14.1.0.3.0.99.6 F5 BIG IP Global Traffic Manager 14.1.0.5 F5 BIG IP Global Traffic Manager 14.1.0.5.0.15.5 F5 BIG IP Global Traffic Manager 14.1.0.5.0.36.5 F5 BIG IP Global Traffic Manager 14.1.0.5.0.40.5 F5 BIG IP Global Traffic Manager 14.1.0.6 F5 BIG IP Global Traffic Manager 14.1.0.6.0.11.9 F5 BIG IP Global Traffic Manager 14.1.0.6.0.14.9 F5 BIG IP Global Traffic Manager 14.1.0.6.0.68.9 F5 BIG IP Global Traffic Manager 14.1.0.6.0.70.9 F5 BIG IP Global Traffic Manager 14.1.2 F5 BIG IP Global Traffic Manager 14.1.2-0.0.37 F5 BIG IP Global Traffic Manager 14.1.2-0.89.37 F5 BIG IP Global Traffic Manager 14.1.2.0.11.37 F5 BIG IP Global Traffic Manager 14.1.2.0.18.37 F5 BIG IP Global Traffic Manager 14.1.2.0.32.37 F5 BIG IP Global Traffic Manager 14.1.2.1 F5 BIG IP Global Traffic Manager 14.1.2.1-0.0.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.14.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.16.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.34.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.46.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.83.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.97.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.99.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.105.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.111.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.115.4 F5 BIG IP Global Traffic Manager 14.1.2.1.0.122.4 F5 BIG IP Global Traffic Manager 14.1.2.2 F5 BIG IP Global Traffic Manager 14.1.2.2-0.0.4 F5 BIG IP Global Traffic Manager 14.1.2.3 F5 BIG IP Global Traffic Manager 14.1.2.3-0.0.5 F5 BIG IP Global Traffic Manager 14.1.2.4 F5 BIG IP Global Traffic Manager 14.1.2.5 F5 BIG IP Global Traffic Manager 14.1.2.5-0.0.3 F5 BIG IP Global Traffic Manager 14.1.2.6 F5 BIG IP Global Traffic Manager 14.1.2.6-0.0.2 F5 BIG IP Global Traffic Manager 14.1.2.7 F5 BIG IP Global Traffic Manager 14.1.2.7-0.0.5 F5 BIG IP Global Traffic Manager 14.1.2.8 F5 BIG IP Global Traffic Manager 14.1.3 F5 BIG IP Link Controller 12.1.0 F5 BIG IP Link Controller 12.1.1 F5 BIG IP Link Controller 12.1.2 F5 BIG IP Link Controller 12.1.3 F5 BIG IP Link Controller 12.1.3.1 F5 BIG IP Link Controller 12.1.3.2 F5 BIG IP Link Controller 12.1.3.3 F5 BIG IP Link Controller 12.1.3.4 F5 BIG IP Link Controller 12.1.3.5 F5 BIG IP Link Controller 12.1.3.6 F5 BIG IP Link Controller 12.1.3.7 F5 BIG IP Link Controller 12.1.4 F5 BIG IP Link Controller 12.1.4.1 F5 BIG IP Link Controller 12.1.4.1.0.97.6 F5 BIG IP Link Controller 12.1.4.2 F5 BIG IP Link Controller 11.6.1 F5 BIG IP Link Controller 11.6.2 F5 BIG IP Link Controller 11.6.3 F5 BIG IP Link Controller 11.6.3.1 F5 BIG IP Link Controller 11.6.3.2 F5 BIG IP Link Controller 11.6.3.3 F5 BIG IP Link Controller 11.6.3.4 F5 BIG IP Link Controller 11.6.4 F5 BIG IP Link Controller 11.6.5 F5 BIG IP Link Controller 15.0.0 F5 BIG IP Link Controller 15.0.1 F5 BIG IP Link Controller 15.0.1.0.33.11 F5 BIG IP Link Controller 15.0.1.0.48.11 F5 BIG IP Link Controller 15.0.1.1 F5 BIG IP Link Controller 15.0.1.2 F5 BIG IP Link Controller 15.0.1.3 F5 BIG IP Link Controller 15.0.1.4 F5 BIG IP Link Controller 15.1.0 F5 BIG IP Link Controller 15.1.0.1 F5 BIG IP Link Controller 15.1.0.2 F5 BIG IP Link Controller 15.1.0.3 F5 BIG IP Link Controller 15.1.0.4 F5 BIG IP Link Controller 15.1.0.5 F5 BIG IP Link Controller 13.1.0 F5 BIG IP Link Controller 13.1.0.0 F5 BIG IP Link Controller 13.1.0.1 F5 BIG IP Link Controller 13.1.0.2 F5 BIG IP Link Controller 13.1.0.3 F5 BIG IP Link Controller 13.1.0.4 F5 BIG IP Link Controller 13.1.0.5 F5 BIG IP Link Controller 13.1.0.6 F5 BIG IP Link Controller 13.1.0.7 F5 BIG IP Link Controller 13.1.0.8 F5 BIG IP Link Controller 13.1.1 F5 BIG IP Link Controller 13.1.1.1 F5 BIG IP Link Controller 13.1.1.2 F5 BIG IP Link Controller 13.1.1.3 F5 BIG IP Link Controller 13.1.1.4 F5 BIG IP Link Controller 13.1.1.5 F5 BIG IP Link Controller 13.1.2 F5 BIG IP Link Controller 13.1.3 F5 BIG IP Link Controller 13.1.3.1 F5 BIG IP Link Controller 13.1.3.2 F5 BIG IP Link Controller 13.1.3.3 F5 BIG IP Link Controller 13.1.3.4 F5 BIG IP Link Controller 14.1.0 F5 BIG IP Link Controller 14.1.0.1 F5 BIG IP Link Controller 14.1.0.2 F5 BIG IP Link Controller 14.1.0.2.0.45.4 F5 BIG IP Link Controller 14.1.0.2.0.62.4 F5 BIG IP Link Controller 14.1.0.3 F5 BIG IP Link Controller 14.1.0.3.0.79.6 F5 BIG IP Link Controller 14.1.0.3.0.97.6 F5 BIG IP Link Controller 14.1.0.3.0.99.6 F5 BIG IP Link Controller 14.1.0.5 F5 BIG IP Link Controller 14.1.0.5.0.15.5 F5 BIG IP Link Controller 14.1.0.5.0.36.5 F5 BIG IP Link Controller 14.1.0.5.0.40.5 F5 BIG IP Link Controller 14.1.0.6 F5 BIG IP Link Controller 14.1.0.6.0.11.9 F5 BIG IP Link Controller 14.1.0.6.0.14.9 F5 BIG IP Link Controller 14.1.0.6.0.68.9 F5 BIG IP Link Controller 14.1.0.6.0.70.9 F5 BIG IP Link Controller 14.1.2 F5 BIG IP Link Controller 14.1.2-0.0.37 F5 BIG IP Link Controller 14.1.2-0.89.37 F5 BIG IP Link Controller 14.1.2.0.11.37 F5 BIG IP Link Controller 14.1.2.0.18.37 F5 BIG IP Link Controller 14.1.2.0.32.37 F5 BIG IP Link Controller 14.1.2.1 F5 BIG IP Link Controller 14.1.2.1-0.0.4 F5 BIG IP Link Controller 14.1.2.1.0.14.4 F5 BIG IP Link Controller 14.1.2.1.0.16.4 F5 BIG IP Link Controller 14.1.2.1.0.34.4 F5 BIG IP Link Controller 14.1.2.1.0.46.4 F5 BIG IP Link Controller 14.1.2.1.0.83.4 F5 BIG IP Link Controller 14.1.2.1.0.97.4 F5 BIG IP Link Controller 14.1.2.1.0.99.4 F5 BIG IP Link Controller 14.1.2.1.0.105.4 F5 BIG IP Link Controller 14.1.2.1.0.111.4 F5 BIG IP Link Controller 14.1.2.1.0.115.4 F5 BIG IP Link Controller 14.1.2.1.0.122.4 F5 BIG IP Link Controller 14.1.2.2 F5 BIG IP Link Controller 14.1.2.2-0.0.4 F5 BIG IP Link Controller 14.1.2.3 F5 BIG IP Link Controller 14.1.2.3-0.0.5 F5 BIG IP Link Controller 14.1.2.4 F5 BIG IP Link Controller 14.1.2.5 F5 BIG IP Link Controller 14.1.2.5-0.0.3 F5 BIG IP Link Controller 14.1.2.6 F5 BIG IP Link Controller 14.1.2.6-0.0.2 F5 BIG IP Link Controller 14.1.2.7 F5 BIG IP Link Controller 14.1.2.7-0.0.5 F5 BIG IP Link Controller 14.1.2.8 F5 BIG IP Link Controller 14.1.3 F5 BIG IP Domain Name System 12.1.0 F5 BIG IP Domain Name System 12.1.1 F5 BIG IP Domain Name System 12.1.2 F5 BIG IP Domain Name System 12.1.3 F5 BIG IP Domain Name System 12.1.3.1 F5 BIG IP Domain Name System 12.1.3.2 F5 BIG IP Domain Name System 12.1.3.3 F5 BIG IP Domain Name System 12.1.3.4 F5 BIG IP Domain Name System 12.1.3.5 F5 BIG IP Domain Name System 12.1.3.6 F5 BIG IP Domain Name System 12.1.3.7 F5 BIG IP Domain Name System 12.1.4 F5 BIG IP Domain Name System 12.1.4.1 F5 BIG IP Domain Name System 12.1.4.1.0.97.6 F5 BIG IP Domain Name System 12.1.4.2 F5 BIG IP Domain Name System 11.6.1 F5 BIG IP Domain Name System 11.6.2 F5 BIG IP Domain Name System 11.6.3 F5 BIG IP Domain Name System 11.6.3.1 F5 BIG IP Domain Name System 11.6.3.2 F5 BIG IP Domain Name System 11.6.3.3 F5 BIG IP Domain Name System 11.6.3.4 F5 BIG IP Domain Name System 11.6.4 F5 BIG IP Domain Name System 11.6.5 F5 BIG IP Domain Name System 15.0.0 F5 BIG IP Domain Name System 15.0.1 F5 BIG IP Domain Name System 15.0.1.0.33.11 F5 BIG IP Domain Name System 15.0.1.0.48.11 F5 BIG IP Domain Name System 15.0.1.1 F5 BIG IP Domain Name System 15.0.1.2 F5 BIG IP Domain Name System 15.0.1.3 F5 BIG IP Domain Name System 15.0.1.4 F5 BIG IP Domain Name System 15.1.0 F5 BIG IP Domain Name System 15.1.0.1 F5 BIG IP Domain Name System 15.1.0.2 F5 BIG IP Domain Name System 15.1.0.3 F5 BIG IP Domain Name System 15.1.0.4 F5 BIG IP Domain Name System 15.1.0.5 F5 BIG IP Domain Name System 13.1.0 F5 BIG IP Domain Name System 13.1.0.0 F5 BIG IP Domain Name System 13.1.0.1 F5 BIG IP Domain Name System 13.1.0.2 F5 BIG IP Domain Name System 13.1.0.3 F5 BIG IP Domain Name System 13.1.0.4 F5 BIG IP Domain Name System 13.1.0.5 F5 BIG IP Domain Name System 13.1.0.6 F5 BIG IP Domain Name System 13.1.0.7 F5 BIG IP Domain Name System 13.1.0.8 F5 BIG IP Domain Name System 13.1.1 F5 BIG IP Domain Name System 13.1.1.1 F5 BIG IP Domain Name System 13.1.1.2 F5 BIG IP Domain Name System 13.1.1.3 F5 BIG IP Domain Name System 13.1.1.4 F5 BIG IP Domain Name System 13.1.1.5 F5 BIG IP Domain Name System 13.1.2 F5 BIG IP Domain Name System 13.1.3 F5 BIG IP Domain Name System 13.1.3.1 F5 BIG IP Domain Name System 13.1.3.2 F5 BIG IP Domain Name System 13.1.3.3 F5 BIG IP Domain Name System 13.1.3.4 F5 BIG IP Domain Name System 14.1.0 F5 BIG IP Domain Name System 14.1.0.1 F5 BIG IP Domain Name System 14.1.0.2 F5 BIG IP Domain Name System 14.1.0.2.0.45.4 F5 BIG IP Domain Name System 14.1.0.2.0.62.4 F5 BIG IP Domain Name System 14.1.0.3 F5 BIG IP Domain Name System 14.1.0.3.0.79.6 F5 BIG IP Domain Name System 14.1.0.3.0.97.6 F5 BIG IP Domain Name System 14.1.0.3.0.99.6 F5 BIG IP Domain Name System 14.1.0.5 F5 BIG IP Domain Name System 14.1.0.5.0.15.5 F5 BIG IP Domain Name System 14.1.0.5.0.36.5 F5 BIG IP Domain Name System 14.1.0.5.0.40.5 F5 BIG IP Domain Name System 14.1.0.6 F5 BIG IP Domain Name System 14.1.0.6.0.11.9 F5 BIG IP Domain Name System 14.1.0.6.0.14.9 F5 BIG IP Domain Name System 14.1.0.6.0.68.9 F5 BIG IP Domain Name System 14.1.0.6.0.70.9 F5 BIG IP Domain Name System 14.1.2 F5 BIG IP Domain Name System 14.1.2-0.0.37 F5 BIG IP Domain Name System 14.1.2-0.89.37 F5 BIG IP Domain Name System 14.1.2.0.11.37 F5 BIG IP Domain Name System 14.1.2.0.18.37 F5 BIG IP Domain Name System 14.1.2.0.32.37 F5 BIG IP Domain Name System 14.1.2.1 F5 BIG IP Domain Name System 14.1.2.1-0.0.4 F5 BIG IP Domain Name System 14.1.2.1.0.14.4 F5 BIG IP Domain Name System 14.1.2.1.0.16.4 F5 BIG IP Domain Name System 14.1.2.1.0.34.4 F5 BIG IP Domain Name System 14.1.2.1.0.46.4 F5 BIG IP Domain Name System 14.1.2.1.0.83.4 F5 BIG IP Domain Name System 14.1.2.1.0.97.4 F5 BIG IP Domain Name System 14.1.2.1.0.99.4 F5 BIG IP Domain Name System 14.1.2.1.0.105.4 F5 BIG IP Domain Name System 14.1.2.1.0.111.4 F5 BIG IP Domain Name System 14.1.2.1.0.115.4 F5 BIG IP Domain Name System 14.1.2.1.0.122.4 F5 BIG IP Domain Name System 14.1.2.2 F5 BIG IP Domain Name System 14.1.2.2-0.0.4 F5 BIG IP Domain Name System 14.1.2.3 F5 BIG IP Domain Name System 14.1.2.3-0.0.5 F5 BIG IP Domain Name System 14.1.2.4 F5 BIG IP Domain Name System 14.1.2.5 F5 BIG IP Domain Name System 14.1.2.5-0.0.3 F5 BIG IP Domain Name System 14.1.2.6 F5 BIG IP Domain Name System 14.1.2.6-0.0.2 F5 BIG IP Domain Name System 14.1.2.7 F5 BIG IP Domain Name System 14.1.2.7-0.0.5 F5 BIG IP Domain Name System 14.1.2.8 F5 BIG IP Domain Name System 14.1.3	341

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

References

https://support.f5.com/csp/article/K25595031