1. Home
  2. CVE Database
  3. CVE-2015-5516
HIGH · 7.5

CVE-2015-5516

Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x be...

Vulnerability Description

Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Analytics 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP APM and ASM 10.1.0 through 10.2.4, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, and 11.3.0, BIG-IP PSM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, and 11.4.x before 11.4.1 HF, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 might allow remote attackers to cause a denial of service (memory consumption) via a large number of crafted UDP packets.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Iq Application Delivery Controller4.5.0
F5Big-Ip Local Traffic Manager10.0.0
F5Big-Ip Access Policy Manager10.1.0
F5Big-Ip Edge Gateway10.1.0
F5Big-Ip Application Security Manager10.1.0
F5Big-Iq Security4.0.0
F5Big-Ip Wan Optimization Manager10.1.0
F5Big-Ip Global Traffic Manager10.1.0
F5Big-Ip Link Controller10.1.0
F5Big-Ip Advanced Firewall Manager11.3.0
F5Big-Ip Policy Enforcement Manager11.3.0
F5Big-Iq Cloud4.0.0
F5Big-Ip Application Acceleration Manager11.4.0
F5Big-Iq Device4.2.0
F5Big-Ip Enterprise Manager3.0.0
F5Big-Ip Webaccelerator10.1.0
F5Big-Ip Analytics11.0.0
F5Big-Ip Protocol Security Module10.1.0

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2015-5516?

CVE-2015-5516 is a vulnerability with a CVSS score of 7.5 (HIGH). Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x be...

How severe is CVE-2015-5516?

CVE-2015-5516 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-5516?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Iq Application Delivery Controller, F5 Big-Ip Local Traffic Manager, F5 Big-Ip Access Policy Manager, F5 Big-Ip Edge Gateway, F5 Big-Ip Application Security Manager.