1. Home
  2. CVE Database
  3. CVE-2015-8099
MEDIUM · 5.9

CVE-2015-8099

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11...

Vulnerability Description

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12.x before 12.0.0 HF1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 HF10; Enterprise Manager 3.0.0 through 3.1.1; BIG-IQ Cloud and BIG-IQ Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; and BIG-IQ Cloud and Orchestration 1.0.0 on the 3900, 6900, 8900, 8950, 11000, 11050, PB100 and PB200 platforms, when software SYN cookies are configured on virtual servers, allow remote attackers to cause a denial of service (High-Speed Bridge hang) via an invalid TCP segment.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Access Policy Manager11.3.0
F5Big-Ip Wan Optimization Manager11.3.0
F5Big-Ip Application Security Manager11.3.0
F5Big-Ip Link Controller11.3.0
F5Big-Ip Advanced Firewall Manager11.3.0
F5Big-Ip Analytics11.3.0
F5Big-Ip Protocol Security Module11.3.0
F5Big-Iq Device4.2.0
F5Big-Iq Security4.0.0
F5Big-Iq Application Delivery Controller4.5.0
F5Big-Ip Edge Gateway11.3.0
F5Big-Ip Global Traffic Manager11.3.0
F5Big-Ip Local Traffic Manager10.2.0
F5Big-Iq Cloud And Orchestration1.0.0
F5Big-Iq Cloud4.0.0
F5Big-Iq Centralized Management4.6.0
F5Big-Ip Policy Enforcement Manager11.3.0
F5Big-Ip Domain Name System12.0.0
F5Big-Ip Application Acceleration Manager11.4.0
F5Big-Ip Enterprise Manager3.0.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2015-8099?

CVE-2015-8099 is a vulnerability with a CVSS score of 5.9 (MEDIUM). F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11...

How severe is CVE-2015-8099?

CVE-2015-8099 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-8099?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Access Policy Manager, F5 Big-Ip Wan Optimization Manager, F5 Big-Ip Application Security Manager, F5 Big-Ip Link Controller, F5 Big-Ip Advanced Firewall Manager.