CVE-2015-7759

LOW

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 - Denial of Service via Crafted ICMP Packets

Title source: llm
STIX 2.1

Description

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034627

Scores

CVSS v3 3.7
EPSS 0.0075
EPSS Percentile 73.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-20
Status published
Products (8)
f5/big-ip_access_policy_manager 12.0.0
f5/big-ip_advanced_firewall_manager 12.0.0
f5/big-ip_analytics 12.0.0
f5/big-ip_application_acceleration_manager 12.0.0
f5/big-ip_application_security_manager 12.0.0
f5/big-ip_link_controller 12.0.0
f5/big-ip_local_traffic_manager 12.0.0
f5/big-ip_policy_enforcement_manager 12.0.0
Published Jan 12, 2016
Tracked Since Feb 18, 2026