cbcvebase.
CVE-2015-5058
published 2015-08-24

CVE-2015-5058: Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3…

PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.91%
77.5th percentile
Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted ICMP packets.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_access_policy_manager——
f5big-ip_access_policy_manager——
f5big-ip_access_policy_manager——
f5big-ip_advanced_firewall_manager——
f5big-ip_advanced_firewall_manager——
f5big-ip_advanced_firewall_manager——
f5big-ip_analytics——
f5big-ip_analytics——
f5big-ip_analytics——
f5big-ip_application_acceleration_manager——
f5big-ip_application_acceleration_manager——
f5big-ip_application_acceleration_manager——
f5big-ip_application_security_manager——
f5big-ip_application_security_manager——
f5big-ip_application_security_manager——
f5big-ip_global_traffic_manager——
f5big-ip_global_traffic_manager——
f5big-ip_global_traffic_manager——
f5big-ip_link_controller——
f5big-ip_link_controller——
f5big-ip_link_controller——
f5big-ip_local_traffic_manager——
f5big-ip_local_traffic_manager——
f5big-ip_local_traffic_manager——
f5big-iq_adc——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.