CVE-2015-7759
BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.
- Score
- CVSS 3.0 3.7 Low
- Status
- Modified - cve@mitre.org
- Published
- 2016-01-12
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
- Big-ip Access Policy Manager (F5)
- Big-ip Advanced Firewall Manager (F5)
- Big-ip Analytics (F5)
- Big-ip Application Acceleration Manager (F5)
- Big-ip Application Security Manager (F5)
- Big-ip Link Controller (F5)
- Big-ip Local Traffic Manager (F5)
- Big-ip Policy Enforcement Manager (F5)
References
- http://www.securitytracker.com/id/1034627
- https://support.f5.com/kb/en-us/solutions/public/k/22/sol22843911.html
