CVE-2015-5058

High

Published: 24/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A memory leak in the virtual server component of F5 Big-IP allows remote attackers to exploit it. Attackers can cause a denial of service by sending a large number of crafted ICMP packets.

Risk Assessment

The memory leak can lead to resource exhaustion, resulting in denial of service for users. Organizations may experience downtime and loss of service availability.

Recommendation

It is recommended to upgrade to versions 11.5.1 HF10, 11.5.3 HF1, or 11.6.0 HF5 and to monitor ICMP traffic for detecting and blocking potential attacks.

Other vulnerabilities in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, BIG-IQ Cloud, Device, Security, BIG-IQ ADC

CVE-2015-8240High
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 does not properly handle TCP options, allowing remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.

Original NVD description (English source)

Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted ICMP packets.