UpHeron
All vulnerabilities

Servers and applications

CVE-2020-5898

In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash.

Severity
Medium 5.5
Published
12 May 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • From 11.6.1 up to 11.6.5.1
  • From 12.1.0 up to 12.1.5.1
  • From 13.1.0 up to 13.1.3.3
  • From 14.1.0 up to 14.1.2.5
  • From 15.0.0 up to 15.1.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-5898
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-5898