Memory Leak Vulnerability in F5 Big-IP Products
CVE-2015-5058

Currently unrated

Key Information:

Vendor: F5
Status: Big-ip Link Controller; Big-ip Analytics; Big-iq Security; Big-ip Application Security Manager
Vendor: CVE Published:; 24 August 2015

Summary

A memory leak vulnerability exists in the virtual server component of F5 Big-IP products, allowing remote attackers to exploit this weakness. By sending a significant number of crafted ICMP packets, an attacker can deplete the memory resources of the affected systems, potentially leading to a denial of service. This issue affects multiple Big-IP versions, emphasizing the need for timely updates and proper security measures to safeguard networks.

References

https://support.f5.com/kb/en-us/solutions/public/17000/00...

x_refsource_CONFIRM

http://www.securitytracker.com/id/1033334

vdb-entryx_refsource_SECTRACK

Timeline

Vulnerability published
Aug 24, 2015
Vulnerability Reserved
Jun 24, 2015