F5 has released security updates that address vulnerabilities (CVE-2019-15903, CVE-2020-10878) affecting multiple versions of BIG-IP, BIG-IQ, F5OS-A, F5OS-C and Traffix SDC. A remote attacker could exploit these vulnerabilities to trigger a buffer over-read and denial of service condition on the targeted system.

Users are encouraged to review the following F5 security advisories and apply the necessary updates:

• K05295469: Expat library vulnerability - CVE-2019-15903

• K40508224: Perl component vulnerability – CVE-2020-10878.