Lucene search

[email protected]CVE-2015-8099

HistoryMay 13, 2016 - 4:59 p.m.

CVE-2015-8099

2016-05-1316:59:05

CWE-20

[email protected]

web.nvd.nist.gov

big-ip

ltm

afm

analytics

apm

asm

link controller

pem

nvd

cve-2015-8099

dos

tcp segment

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

JSON

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12.x before 12.0.0 HF1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 HF10; Enterprise Manager 3.0.0 through 3.1.1; BIG-IQ Cloud and BIG-IQ Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; and BIG-IQ Cloud and Orchestration 1.0.0 on the 3900, 6900, 8900, 8950, 11000, 11050, PB100 and PB200 platforms, when software SYN cookies are configured on virtual servers, allow remote attackers to cause a denial of service (High-Speed Bridge hang) via an invalid TCP segment.

Affected configurations

NVD

Node

f5big-ip_access_policy_managerMatch11.3.0

f5big-ip_access_policy_managerMatch11.4.0

f5big-ip_access_policy_managerMatch11.4.1

f5big-ip_access_policy_managerMatch11.5.0

f5big-ip_access_policy_managerMatch11.5.1

f5big-ip_access_policy_managerMatch11.5.2

f5big-ip_access_policy_managerMatch11.5.3

f5big-ip_access_policy_managerMatch11.6.0

f5big-ip_access_policy_managerMatch12.0.0

Node

f5big-ip_wan_optimization_managerMatch11.3.0

Node

f5big-ip_application_security_managerMatch11.3.0

f5big-ip_application_security_managerMatch11.4.0

f5big-ip_application_security_managerMatch11.4.1

f5big-ip_application_security_managerMatch11.5.0

f5big-ip_application_security_managerMatch11.5.1

f5big-ip_application_security_managerMatch11.5.2

f5big-ip_application_security_managerMatch11.5.3

f5big-ip_application_security_managerMatch11.6.0

f5big-ip_application_security_managerMatch12.0.0

Node

f5big-ip_link_controllerMatch11.3.0

f5big-ip_link_controllerMatch11.4.0

f5big-ip_link_controllerMatch11.4.1

f5big-ip_link_controllerMatch11.5.0

f5big-ip_link_controllerMatch11.5.1

f5big-ip_link_controllerMatch11.5.2

f5big-ip_link_controllerMatch11.5.3

f5big-ip_link_controllerMatch11.6.0

f5big-ip_link_controllerMatch12.0.0

Node

f5big-ip_advanced_firewall_managerMatch11.3.0

f5big-ip_advanced_firewall_managerMatch11.4.0

f5big-ip_advanced_firewall_managerMatch11.4.1

f5big-ip_advanced_firewall_managerMatch11.5.0

f5big-ip_advanced_firewall_managerMatch11.5.1

f5big-ip_advanced_firewall_managerMatch11.5.2

f5big-ip_advanced_firewall_managerMatch11.5.3

f5big-ip_advanced_firewall_managerMatch11.6.0

f5big-ip_advanced_firewall_managerMatch12.0.0

f5big-ip_analyticsMatch11.3.0

f5big-ip_analyticsMatch11.4.0

f5big-ip_analyticsMatch11.4.1

f5big-ip_analyticsMatch11.5.0

f5big-ip_analyticsMatch11.5.1

f5big-ip_analyticsMatch11.5.2

f5big-ip_analyticsMatch11.5.3

f5big-ip_analyticsMatch11.6.0

f5big-ip_analyticsMatch12.0.0

Node

f5big-ip_advanced_firewall_managerMatch11.3.0

f5big-ip_advanced_firewall_managerMatch11.4.0

f5big-ip_advanced_firewall_managerMatch11.4.1

f5big-ip_advanced_firewall_managerMatch11.5.0

f5big-ip_advanced_firewall_managerMatch11.5.1

f5big-ip_advanced_firewall_managerMatch11.5.2

f5big-ip_advanced_firewall_managerMatch11.5.3

f5big-ip_advanced_firewall_managerMatch11.6.0

f5big-ip_advanced_firewall_managerMatch12.0.0

Node

f5big-ip_protocol_security_moduleMatch11.3.0

f5big-ip_protocol_security_moduleMatch11.4.0

f5big-ip_protocol_security_moduleMatch11.4.1

Node

f5big-iq_deviceMatch4.2.0

f5big-iq_securityMatch4.0.0

f5big-iq_securityMatch4.1.0

f5big-iq_securityMatch4.2.0

f5big-iq_securityMatch4.3.0

f5big-iq_securityMatch4.4.0

f5big-iq_securityMatch4.5.0

Node

f5big-iq_application_delivery_controllerMatch4.5.0

Node

f5big-ip_edge_gatewayMatch11.3.0

f5big-ip_global_traffic_managerMatch11.3.0

f5big-ip_global_traffic_managerMatch11.4.0

f5big-ip_global_traffic_managerMatch11.4.1

f5big-ip_global_traffic_managerMatch11.5.0

f5big-ip_global_traffic_managerMatch11.5.1

f5big-ip_global_traffic_managerMatch11.5.2

f5big-ip_global_traffic_managerMatch11.5.3

f5big-ip_global_traffic_managerMatch11.6.0

Node

f5big-ip_local_traffic_managerMatch10.2.0

f5big-ip_local_traffic_managerMatch11.3.0

f5big-ip_local_traffic_managerMatch11.4.0

f5big-ip_local_traffic_managerMatch11.4.1

f5big-ip_local_traffic_managerMatch11.5.0

f5big-ip_local_traffic_managerMatch11.5.1

f5big-ip_local_traffic_managerMatch11.5.2

f5big-ip_local_traffic_managerMatch11.5.3

f5big-ip_local_traffic_managerMatch11.6.0

f5big-ip_local_traffic_managerMatch12.0.0

Node

f5big-iq_cloud_and_orchestrationMatch1.0.0

Node

f5big-iq_cloudMatch4.0.0

f5big-iq_cloudMatch4.1.0

f5big-iq_cloudMatch4.2.0

f5big-iq_cloudMatch4.3.0

f5big-iq_cloudMatch4.4.0

f5big-iq_cloudMatch4.5.0

Node

f5big-iq_centralized_managementMatch4.6.0

Node

f5big-iq_deviceMatch4.2.0

f5big-iq_deviceMatch4.3.0

f5big-iq_deviceMatch4.4.0

f5big-iq_deviceMatch4.5.0

Node

f5big-ip_policy_enforcement_managerMatch11.3.0

f5big-ip_policy_enforcement_managerMatch11.4.0

f5big-ip_policy_enforcement_managerMatch11.4.1

f5big-ip_policy_enforcement_managerMatch11.5.0

f5big-ip_policy_enforcement_managerMatch11.5.1

f5big-ip_policy_enforcement_managerMatch11.5.2

f5big-ip_policy_enforcement_managerMatch11.5.3

f5big-ip_policy_enforcement_managerMatch11.6.0

f5big-ip_policy_enforcement_managerMatch12.0.0

Node

f5big-ip_domain_name_systemMatch12.0.0

Node

f5big-ip_application_acceleration_managerMatch11.4.0

f5big-ip_application_acceleration_managerMatch11.4.1

f5big-ip_application_acceleration_managerMatch11.5.0

f5big-ip_application_acceleration_managerMatch11.5.1

f5big-ip_application_acceleration_managerMatch11.5.2

f5big-ip_application_acceleration_managerMatch11.5.3

f5big-ip_application_acceleration_managerMatch11.6.0

f5big-ip_application_acceleration_managerMatch12.0.0

Node

f5big-ip_enterprise_managerMatch3.0.0

f5big-ip_enterprise_managerMatch3.1.0

f5big-ip_enterprise_managerMatch3.1.1

Node

f5big-ip_edge_gatewayMatch11.3.0

Node

f5big-ip_webacceleratorMatch11.3.0

CPENameOperatorVersion
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.3.0
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.4.0
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.4.1
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.5.0
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.5.1
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.5.2
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.5.3
f5:big-ip_access_policy_managerf5 big-ip access policy managereq11.6.0
f5:big-ip_access_policy_managerf5 big-ip access policy managereq12.0.0

CPE	Name	Operator	Version
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.3.0
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.4.0
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.4.1
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.5.0
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.5.1
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.5.2
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.5.3
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	11.6.0
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	eq	12.0.0

References

www.securitytracker.com/id/1035873

www.securitytracker.com/id/1035874

support.f5.com/kb/en-us/solutions/public/k/35/sol35358312.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

JSON

Related for CVE-2015-8099

f52 nessus1 prion1 cvelist1 openvas1 nvd1