Design/Logic Flaw

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue...

CVE-2018-5500

Summary: CVE-2018-5500 is a memory-leak vulnerability in F5 BIG-IP’s Multipath TCP (MPTCP) feature. The advisory details affected products and versions: BIG-IP (LTM and related modules) 13.0.0, 13.0.x; 12.x 12.1.0–12.1.3; 11.x 11.6.1–11.6.2, with fixes in 13.1.0, 12.1.3.2, and 11.6.3 respectively...