Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2015-7759
HistoryJan 12, 2016 - 8:59 p.m.

CVE-2015-7759

2016-01-1220:59:01
CWE-20
mitre
web.nvd.nist.gov
39
cve-2015-7759
big-ip ltm
aam
afm
analytics
apm
asm
link controller
pem
tcp profile
congestion metrics cache
denial of service

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.4

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.

Affected configurations

Nvd
Node
f5big-ip_analyticsMatch12.0.0
Node
f5big-ip_application_acceleration_managerMatch12.0.0
Node
f5big-ip_link_controllerMatch12.0.0
Node
f5big-ip_advanced_firewall_managerMatch12.0.0
Node
f5big-ip_policy_enforcement_managerMatch12.0.0
Node
f5big-ip_local_traffic_managerMatch12.0.0
Node
f5big-ip_access_policy_managerMatch12.0.0
Node
f5big-ip_application_security_managerMatch12.0.0
VendorProductVersionCPE
f5big-ip_analytics12.0.0cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager12.0.0cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_link_controller12.0.0cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*
f5big-ip_advanced_firewall_manager12.0.0cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_policy_enforcement_manager12.0.0cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager12.0.0cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_access_policy_manager12.0.0cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_application_security_manager12.0.0cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*

Related

nvd 1
prion 1
openvas 1
f5 2
cvelist 1
nessus 1
nvd
nvd
CVE-2015-7759
2016-01-12 20:59:01
prion
prion
Design/Logic Flaw
2016-01-12 20:59:00
openvas
openvas
F5 BIG-IP - F5 Path MTU Discovery vulnerability CVE-2015-7759
2016-01-08 00:00:00
f5
f5
SOL22843911 - F5 Path MTU Discovery vulnerability CVE-2015-7759
2016-01-07 00:00:00
K22843911 : F5 Path MTU Discovery vulnerability CVE-2015-7759
2016-01-08 00:00:00
cvelist
cvelist
CVE-2015-7759
2016-01-12 20:00:00
nessus
nessus
F5 Networks BIG-IP : F5 Path MTU Discovery vulnerability (K22843911)
2016-01-08 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.4

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON
Related for CVE-2015-7759
nvd1prion1openvas1f52cvelist1nessus1