CVE-2015-8240: High severity f5 access policy manager vulnerability

Published Apr 11, 2016

Updated

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.

Affected Software

28 affected components

F5 BIG-IP Access Policy Manager=11.4.1

F5 BIG-IP Access Policy Manager=11.5.3

F5 BIG-IP Access Policy Manager=11.6.0

F5 BIG-IP Advanced Firewall Manager=11.4.1

F5 BIG-IP Advanced Firewall Manager=11.5.3

F5 BIG-IP Advanced Firewall Manager=11.6.0

F5 BIG-IP Analytics=11.4.1

F5 BIG-IP Analytics=11.5.3

F5 BIG-IP Analytics=11.6.0

F5 Big-ip Application Acceleration Manager=11.4.1

F5 Big-ip Application Acceleration Manager=11.5.3

F5 Big-ip Application Acceleration Manager=11.6.0

F5 BIG-IP Application Security Manager=11.4.1

F5 BIG-IP Application Security Manager=11.5.3

F5 BIG-IP Application Security Manager=11.6.0

F5 Big-ip Global Traffic Manager=11.4.1

F5 Big-ip Global Traffic Manager=11.5.3

F5 Big-ip Global Traffic Manager=11.6.0

F5 Big-ip Link Controller=11.4.1

F5 Big-ip Link Controller=11.5.3

F5 Big-ip Link Controller=11.6.0

F5 Big-ip Local Traffic Manager=11.4.1

F5 Big-ip Local Traffic Manager=11.5.3

F5 Big-ip Local Traffic Manager=11.6.0

F5 Big-ip Policy Enforcement Manager=11.4.1

F5 Big-ip Policy Enforcement Manager=11.5.3

F5 Big-ip Policy Enforcement Manager=11.6.0

F5 Big-ip Protocol Security Module=11.4.1

Event History

Apr 11, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8240?

CVE-2015-8240 is classified as a medium severity vulnerability.

How do I fix CVE-2015-8240?

To fix CVE-2015-8240, upgrade your F5 BIG-IP software to a version above the specified vulnerable versions.

Which F5 BIG-IP products are affected by CVE-2015-8240?

CVE-2015-8240 affects F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM components.

What versions of F5 BIG-IP are vulnerable to CVE-2015-8240?

F5 BIG-IP versions prior to 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 are vulnerable to CVE-2015-8240.

Can CVE-2015-8240 be exploited remotely?

Yes, CVE-2015-8240 can be exploited by remote attackers, which poses a risk to unpatched systems.