All vulnerabilities

Servers and applications

CVE-2020-27720

On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the default of 128, an undisclosed traffic pattern may cause the Traffic Management Microkernel (TMM) to restart.

Severity
High 7.5
Published
24 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
14.1.3.1, 15.1.1, 16.0.1
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • From 13.1.0 up to 13.1.3
  • From 14.1.0 before 14.1.3.1
  • From 15.1.0 before 15.1.1
  • From 16.0.0 before 16.0.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-27720
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-27720