Lucene search

K
cve[email protected]CVE-2015-5516
HistoryJan 20, 2016 - 4:59 p.m.

CVE-2015-5516

2016-01-2016:59:01
CWE-399
web.nvd.nist.gov
28
cve-2015-5516
f5 big-ip
memory leak
denial of service
nvd
security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.7%

Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Analytics 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP APM and ASM 10.1.0 through 10.2.4, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, and 11.3.0, BIG-IP PSM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, and 11.4.x before 11.4.1 HF, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 might allow remote attackers to cause a denial of service (memory consumption) via a large number of crafted UDP packets.

Affected configurations

NVD
Node
f5big-iq_application_delivery_controllerMatch4.5.0
Node
f5big-ip_local_traffic_managerMatch10.0.0
OR
f5big-ip_local_traffic_managerMatch10.0.1
OR
f5big-ip_local_traffic_managerMatch10.1.0
OR
f5big-ip_local_traffic_managerMatch10.2.0
OR
f5big-ip_local_traffic_managerMatch10.2.1
OR
f5big-ip_local_traffic_managerMatch10.2.2
OR
f5big-ip_local_traffic_managerMatch10.2.3
OR
f5big-ip_local_traffic_managerMatch10.2.4
OR
f5big-ip_local_traffic_managerMatch11.0.0
OR
f5big-ip_local_traffic_managerMatch11.1.0
OR
f5big-ip_local_traffic_managerMatch11.2.0
OR
f5big-ip_local_traffic_managerMatch11.2.1
OR
f5big-ip_local_traffic_managerMatch11.3.0
OR
f5big-ip_local_traffic_managerMatch11.4.0
OR
f5big-ip_local_traffic_managerMatch11.4.1
OR
f5big-ip_local_traffic_managerMatch11.5.0
OR
f5big-ip_local_traffic_managerMatch11.5.1
OR
f5big-ip_local_traffic_managerMatch11.5.2
OR
f5big-ip_local_traffic_managerMatch11.5.3
OR
f5big-ip_local_traffic_managerMatch11.6.0
Node
f5big-ip_access_policy_managerMatch10.1.0
OR
f5big-ip_access_policy_managerMatch10.2.0
OR
f5big-ip_access_policy_managerMatch10.2.1
OR
f5big-ip_access_policy_managerMatch10.2.2
OR
f5big-ip_access_policy_managerMatch10.2.3
OR
f5big-ip_access_policy_managerMatch10.2.4
OR
f5big-ip_access_policy_managerMatch11.0.0
OR
f5big-ip_access_policy_managerMatch11.1.0
OR
f5big-ip_access_policy_managerMatch11.2.0
OR
f5big-ip_access_policy_managerMatch11.2.1
OR
f5big-ip_access_policy_managerMatch11.3.0
OR
f5big-ip_access_policy_managerMatch11.4.0
OR
f5big-ip_access_policy_managerMatch11.4.1
OR
f5big-ip_access_policy_managerMatch11.5.0
OR
f5big-ip_access_policy_managerMatch11.5.1
OR
f5big-ip_access_policy_managerMatch11.5.2
OR
f5big-ip_access_policy_managerMatch11.5.3
OR
f5big-ip_access_policy_managerMatch11.6.0
Node
f5big-ip_edge_gatewayMatch10.1.0
OR
f5big-ip_edge_gatewayMatch10.2.0
OR
f5big-ip_edge_gatewayMatch10.2.1
OR
f5big-ip_edge_gatewayMatch10.2.2
OR
f5big-ip_edge_gatewayMatch10.2.3
OR
f5big-ip_edge_gatewayMatch10.2.4
OR
f5big-ip_edge_gatewayMatch11.0.0
OR
f5big-ip_edge_gatewayMatch11.1.0
OR
f5big-ip_edge_gatewayMatch11.2.0
OR
f5big-ip_edge_gatewayMatch11.2.1
OR
f5big-ip_edge_gatewayMatch11.3.0
Node
f5big-ip_application_security_managerMatch10.1.0
OR
f5big-ip_application_security_managerMatch10.2.0
OR
f5big-ip_application_security_managerMatch10.2.1
OR
f5big-ip_application_security_managerMatch10.2.2
OR
f5big-ip_application_security_managerMatch10.2.3
OR
f5big-ip_application_security_managerMatch10.2.4
OR
f5big-ip_application_security_managerMatch11.0.0
OR
f5big-ip_application_security_managerMatch11.1.0
OR
f5big-ip_application_security_managerMatch11.2.0
OR
f5big-ip_application_security_managerMatch11.2.1
OR
f5big-ip_application_security_managerMatch11.3.0
OR
f5big-ip_application_security_managerMatch11.4.0
OR
f5big-ip_application_security_managerMatch11.4.1
OR
f5big-ip_application_security_managerMatch11.5.0
OR
f5big-ip_application_security_managerMatch11.5.1
OR
f5big-ip_application_security_managerMatch11.5.2
OR
f5big-ip_application_security_managerMatch11.5.3
OR
f5big-ip_application_security_managerMatch11.6.0
Node
f5big-iq_securityMatch4.0.0
OR
f5big-iq_securityMatch4.1.0
OR
f5big-iq_securityMatch4.2.0
OR
f5big-iq_securityMatch4.3.0
OR
f5big-iq_securityMatch4.4.0
OR
f5big-iq_securityMatch4.5.0
Node
f5big-ip_wan_optimization_managerMatch10.1.0
OR
f5big-ip_wan_optimization_managerMatch10.2.0
OR
f5big-ip_wan_optimization_managerMatch10.2.1
OR
f5big-ip_wan_optimization_managerMatch10.2.2
OR
f5big-ip_wan_optimization_managerMatch10.2.3
OR
f5big-ip_wan_optimization_managerMatch10.2.4
OR
f5big-ip_wan_optimization_managerMatch11.0.0
OR
f5big-ip_wan_optimization_managerMatch11.1.0
OR
f5big-ip_wan_optimization_managerMatch11.2.0
OR
f5big-ip_wan_optimization_managerMatch11.2.1
OR
f5big-ip_wan_optimization_managerMatch11.3.0
Node
f5big-ip_global_traffic_managerMatch10.1.0
OR
f5big-ip_global_traffic_managerMatch10.2.0
OR
f5big-ip_global_traffic_managerMatch10.2.1
OR
f5big-ip_global_traffic_managerMatch10.2.2
OR
f5big-ip_global_traffic_managerMatch10.2.3
OR
f5big-ip_global_traffic_managerMatch10.2.4
OR
f5big-ip_global_traffic_managerMatch11.0.0
OR
f5big-ip_global_traffic_managerMatch11.1.0
OR
f5big-ip_global_traffic_managerMatch11.2.0
OR
f5big-ip_global_traffic_managerMatch11.2.1
OR
f5big-ip_global_traffic_managerMatch11.3.0
OR
f5big-ip_global_traffic_managerMatch11.4.0
OR
f5big-ip_global_traffic_managerMatch11.4.1
OR
f5big-ip_global_traffic_managerMatch11.5.0
OR
f5big-ip_global_traffic_managerMatch11.5.1
OR
f5big-ip_global_traffic_managerMatch11.5.2
OR
f5big-ip_global_traffic_managerMatch11.5.3
OR
f5big-ip_global_traffic_managerMatch11.6.0
Node
f5big-ip_link_controllerMatch10.1.0
OR
f5big-ip_link_controllerMatch10.2.0
OR
f5big-ip_link_controllerMatch10.2.1
OR
f5big-ip_link_controllerMatch10.2.2
OR
f5big-ip_link_controllerMatch10.2.3
OR
f5big-ip_link_controllerMatch10.2.4
OR
f5big-ip_link_controllerMatch11.0.0
OR
f5big-ip_link_controllerMatch11.1.0
OR
f5big-ip_link_controllerMatch11.2.0
OR
f5big-ip_link_controllerMatch11.2.1
OR
f5big-ip_link_controllerMatch11.3.0
OR
f5big-ip_link_controllerMatch11.4.0
OR
f5big-ip_link_controllerMatch11.4.1
OR
f5big-ip_link_controllerMatch11.5.0
OR
f5big-ip_link_controllerMatch11.5.1
OR
f5big-ip_link_controllerMatch11.5.2
OR
f5big-ip_link_controllerMatch11.5.3
OR
f5big-ip_link_controllerMatch11.6.0
Node
f5big-ip_advanced_firewall_managerMatch11.3.0
OR
f5big-ip_advanced_firewall_managerMatch11.4.0
OR
f5big-ip_advanced_firewall_managerMatch11.4.1
OR
f5big-ip_advanced_firewall_managerMatch11.5.0
OR
f5big-ip_advanced_firewall_managerMatch11.5.1
OR
f5big-ip_advanced_firewall_managerMatch11.5.2
OR
f5big-ip_advanced_firewall_managerMatch11.5.3
OR
f5big-ip_advanced_firewall_managerMatch11.6.0
Node
f5big-ip_policy_enforcement_managerMatch11.3.0
OR
f5big-ip_policy_enforcement_managerMatch11.4.0
OR
f5big-ip_policy_enforcement_managerMatch11.4.1
OR
f5big-ip_policy_enforcement_managerMatch11.5.0
OR
f5big-ip_policy_enforcement_managerMatch11.5.1
OR
f5big-ip_policy_enforcement_managerMatch11.5.2
OR
f5big-ip_policy_enforcement_managerMatch11.5.3
OR
f5big-ip_policy_enforcement_managerMatch11.6.0
Node
f5big-iq_cloudMatch4.0.0
OR
f5big-iq_cloudMatch4.1.0
OR
f5big-iq_cloudMatch4.2.0
OR
f5big-iq_cloudMatch4.3.0
OR
f5big-iq_cloudMatch4.4.0
OR
f5big-iq_cloudMatch4.5.0
Node
f5big-ip_application_acceleration_managerMatch11.4.0
OR
f5big-ip_application_acceleration_managerMatch11.4.1
OR
f5big-ip_application_acceleration_managerMatch11.5.0
OR
f5big-ip_application_acceleration_managerMatch11.5.1
OR
f5big-ip_application_acceleration_managerMatch11.5.2
OR
f5big-ip_application_acceleration_managerMatch11.5.3
OR
f5big-ip_application_acceleration_managerMatch11.6.0
Node
f5big-iq_deviceMatch4.2.0
OR
f5big-iq_deviceMatch4.3.0
OR
f5big-iq_deviceMatch4.4.0
OR
f5big-iq_deviceMatch4.5.0
Node
f5big-ip_enterprise_managerMatch3.0.0
OR
f5big-ip_enterprise_managerMatch3.1.0
OR
f5big-ip_enterprise_managerMatch3.1.1
Node
f5big-ip_webacceleratorMatch10.1.0
OR
f5big-ip_webacceleratorMatch10.2.0
OR
f5big-ip_webacceleratorMatch10.2.1
OR
f5big-ip_webacceleratorMatch10.2.2
OR
f5big-ip_webacceleratorMatch10.2.3
OR
f5big-ip_webacceleratorMatch10.2.4
OR
f5big-ip_webacceleratorMatch11.0.0
OR
f5big-ip_webacceleratorMatch11.1.0
OR
f5big-ip_webacceleratorMatch11.2.0
OR
f5big-ip_webacceleratorMatch11.2.1
OR
f5big-ip_webacceleratorMatch11.3.0
Node
f5big-ip_analyticsMatch11.0.0
OR
f5big-ip_analyticsMatch11.1.0
OR
f5big-ip_analyticsMatch11.2.0
OR
f5big-ip_analyticsMatch11.2.1
OR
f5big-ip_analyticsMatch11.3.0
OR
f5big-ip_analyticsMatch11.4.0
OR
f5big-ip_analyticsMatch11.4.1
OR
f5big-ip_analyticsMatch11.5.0
OR
f5big-ip_analyticsMatch11.5.1
OR
f5big-ip_analyticsMatch11.5.2
OR
f5big-ip_analyticsMatch11.5.3
OR
f5big-ip_analyticsMatch11.6.0
Node
f5big-ip_protocol_security_moduleMatch10.1.0
OR
f5big-ip_protocol_security_moduleMatch10.2.0
OR
f5big-ip_protocol_security_moduleMatch10.2.1
OR
f5big-ip_protocol_security_moduleMatch10.2.2
OR
f5big-ip_protocol_security_moduleMatch10.2.3
OR
f5big-ip_protocol_security_moduleMatch10.2.4
OR
f5big-ip_protocol_security_moduleMatch11.0.0
OR
f5big-ip_protocol_security_moduleMatch11.1.0
OR
f5big-ip_protocol_security_moduleMatch11.2.0
OR
f5big-ip_protocol_security_moduleMatch11.2.1
OR
f5big-ip_protocol_security_moduleMatch11.3.0
OR
f5big-ip_protocol_security_moduleMatch11.4.0
OR
f5big-ip_protocol_security_moduleMatch11.4.1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.7%

Related for CVE-2015-5516