CVE-2015-8240

High

Published: 11/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 does not properly handle TCP options, allowing remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.

Risk Assessment

Attackers can exploit this vulnerability to disrupt service availability, potentially leading to downtime and loss of access to critical systems for the organization.

Recommendation

It is recommended to update to the latest version of F5 BIG-IP software to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Other vulnerabilities in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, BIG-IP PEM

CVE-2015-5058High
A memory leak in the virtual server component of F5 Big-IP allows remote attackers to exploit it. Attackers can cause a denial of service by sending a large number of crafted ICMP packets.

Original NVD description (English source)

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.