CVE-2015-5058: High severity f5 access policy manager vulnerability
Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted ICMP packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5058?
CVE-2015-5058 has been assigned a severity rating of medium, indicating it poses a moderate risk to affected systems.
How do I fix CVE-2015-5058?
To fix CVE-2015-5058, upgrade the affected F5 BIG-IP software to at least version 11.5.1 HF10, 11.5.3 HF1, or 11.6.0 HF5.
Which F5 BIG-IP versions are affected by CVE-2015-5058?
CVE-2015-5058 affects F5 BIG-IP versions 11.5.1, 11.5.3, 11.6.0, along with various components of the BIG-IQ platforms.
What type of vulnerability is CVE-2015-5058?
CVE-2015-5058 is a memory leak vulnerability which could allow for resource exhaustion.
Can CVE-2015-5058 be exploited remotely?
Yes, CVE-2015-5058 can be exploited remotely, allowing attackers to potentially cause denial of service.