K06223540 : F5 TCP vulnerability CVE-2015-8240

2016-03-1700:00:00

my.f5.com

0.002 Low

EPSS

Percentile

61.8%

JSON

Security Advisory Description

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial-of-service (DoS) through unspecified vectors, related to the tm.minpathmtu database variable. (CVE-2015-8240)
Impact
The system may experience a denial of service (DoS) when exploited, which may cause the TMM process to restart.

CPENameOperatorVersion
big-iq centralized managementeq4.6.0
big-ip afmeq11.3.0
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.5.3
big-ip afmeq11.5.4
big-ip afmeq11.6.0

Name	Operator	Version
big-iq centralized management	eq	4.6.0
big-ip afm	eq	11.3.0
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3
big-ip afm	eq	11.5.4
big-ip afm	eq	11.6.0

Rows per page:

1-10 of 1851

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for F5:K06223540