CVEvulnerability

CVE-2015-5058

7.8 HIGH Published 2015-08-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-08-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted ICMP packets.

Affected configurations

• f5 big-ip access policy manager 11.5.1 • f5 big-ip access policy manager 11.5.3 • f5 big-ip access policy manager 11.6.0 • f5 big-ip advanced firewall manager 11.5.1 • f5 big-ip advanced firewall manager 11.5.3 • f5 big-ip advanced firewall manager 11.6.0 • f5 big-ip analytics 11.5.1 • f5 big-ip analytics 11.5.3 • f5 big-ip analytics 11.6.0 • f5 big-ip application acceleration manager 11.5.1 • f5 big-ip application acceleration manager 11.5.3 • f5 big-ip application acceleration manager 11.6.0 • f5 big-ip application security manager 11.5.1 • f5 big-ip application security manager 11.5.3 • f5 big-ip application security manager 11.6.0 • f5 big-ip global traffic manager 11.5.1 • f5 big-ip global traffic manager 11.5.3 • f5 big-ip global traffic manager 11.6.0 • f5 big-ip link controller 11.5.1 • f5 big-ip link controller 11.5.3 • f5 big-ip link controller 11.6.0 • f5 big-ip local traffic manager 11.5.1 • f5 big-ip local traffic manager 11.5.3 • f5 big-ip local traffic manager 11.6.0 • f5 big-iq adc 4.5.0 • f5 big-iq cloud 4.4.0 • f5 big-iq cloud 4.5.0 • f5 big-iq device 4.4.0 • f5 big-iq device 4.5.0 • f5 big-iq security 4.4.0 • f5 big-iq security 4.5.0

Related

Weakness · not in database (1)

References