K43552605 : Out-of-bounds memory vulnerability with the BIG-IP APM system CVE-2015-8098

Security Advisory Description

An out-of-bounds memory vulnerability may allow an unauthenticated BIG-IP APM user to cause a denial-of-service (DoS) or possibly perform remote code execution on a BIG-IP system when a remote desktop profile is assigned to a virtual server. (CVE-2015-8098).
For example, a remote desktop profile is assigned to a virtual server when either of the following options is enabled in the virtual server configuration:

• Application Tunnels (Java & Per-App VPN)
• VDI profile
  Impact
  An unauthenticated remote attacker may be able to cause a denial-of-service (DoS) or perform remote code execution on an affected BIG-IP APM device.
  Note: This vulnerability was identified during internal code audit, and there are no known exploits at this time.