PT-2016-3690 · F5 · F5 Big-Ip Afm/Pem+12

Published 2016-01-20 · Updated 2019-06-06 · CVE-2015-5516

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 10.1.x through 10.2.4 before HF13 F5 BIG-IP LTM versions 11.x before 11.2.1 HF15 F5 BIG-IP LTM versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP LTM versions 11.6.x before HF6 F5 BIG-IP GTM versions 10.1.x through 10.2.4 before HF13 F5 BIG-IP GTM versions 11.x before 11.2.1 HF15 F5 BIG-IP GTM versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP GTM versions 11.6.x before HF6 F5 BIG-IP Link Controller versions 10.1.x through 10.2.4 before HF13 F5 BIG-IP Link Controller versions 11.x before 11.2.1 HF15 F5 BIG-IP Link Controller versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP Link Controller versions 11.6.x before HF6 F5 BIG-IP AAM versions 11.4.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP AAM version 11.6.0 before HF6 F5 BIG-IP AFM and PEM versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP AFM and PEM version 11.6.0 before HF6 F5 BIG-IP Analytics versions 11.x before 11.2.1 HF15 F5 BIG-IP Analytics versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP Analytics version 11.6.0 before HF6 F5 BIG-IP APM and ASM versions 10.1.0 through 10.2.4 F5 BIG-IP APM and ASM versions 11.x before 11.2.1 HF15 F5 BIG-IP APM and ASM versions 11.3.x through 11.5.x before 11.5.3 HF2 F5 BIG-IP APM and ASM version 11.6.0 before HF6 F5 BIG-IP Edge Gateway, WebAccelerator, and WOM versions 10.1.x through 10.2.4 before HF13 F5 BIG-IP Edge Gateway, WebAccelerator, and WOM versions 11.x before 11.2.1 HF15 F5 BIG-IP Edge Gateway, WebAccelerator, and WOM version 11.3.0 F5 BIG-IP PSM versions 10.1.x through 10.2.4 before HF13 F5 BIG-IP PSM versions 11.x before 11.2.1 HF15 F5 BIG-IP PSM versions 11.3.x through 11.4.x before 11.4.1 HF Enterprise Manager versions 3.0.0 through 3.1.1 BIG-IQ Cloud and Security versions 4.0.0 through 4.5.0 BIG-IQ Device versions 4.2.0 through 4.5.0 BIG-IQ ADC version 4.5.0

Description A memory leak in the last hop kernel module might allow remote attackers to cause a denial of service via a large number of crafted UDP packets.

Recommendations For F5 BIG-IP LTM versions 10.1.x through 10.2.4 before HF13, update to a version that includes HF13 or later. For F5 BIG-IP LTM versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP LTM versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP LTM versions 11.6.x before HF6, update to a version that includes HF6 or later. For F5 BIG-IP GTM versions 10.1.x through 10.2.4 before HF13, update to a version that includes HF13 or later. For F5 BIG-IP GTM versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP GTM versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP GTM versions 11.6.x before HF6, update to a version that includes HF6 or later. For F5 BIG-IP Link Controller versions 10.1.x through 10.2.4 before HF13, update to a version that includes HF13 or later. For F5 BIG-IP Link Controller versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP Link Controller versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP Link Controller versions 11.6.x before HF6, update to a version that includes HF6 or later. For F5 BIG-IP AAM versions 11.4.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP AAM version 11.6.0 before HF6, update to a version that includes HF6 or later. For F5 BIG-IP AFM and PEM versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP AFM and PEM version 11.6.0 before HF6, update to a version that includes HF6 or later. For F5 BIG-IP Analytics versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP Analytics versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP Analytics version 11.6.0 before HF6, update to a version that includes HF6 or later. For F5 BIG-IP APM and ASM versions 10.1.0 through 10.2.4, update to a version that includes HF13 or later. For F5 BIG-IP APM and ASM versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP APM and ASM versions 11.3.x through 11.5.x before 11.5.3 HF2, update to a version that includes HF2 or later. For F5 BIG-IP APM and ASM version 11.6.0 before HF6, update to a version that includes HF6 or later. For F5 BIG-IP Edge Gateway, WebAccelerator, and WOM versions 10.1.x through 10.2.4 before HF13, update to a version that includes HF13 or later. For F5 BIG-IP Edge Gateway, WebAccelerator, and WOM versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP Edge Gateway, WebAccelerator, and WOM version 11.3.0, update to a version that includes HF15 or later. For F5 BIG-IP PSM versions 10.1.x through 10.2.4 before HF13, update to a version that includes HF13 or later. For F5 BIG-IP PSM versions 11.x before 11.2.1 HF15, update to a version that includes HF15 or later. For F5 BIG-IP PSM versions 11.3.x through 11.4.x before 11.4.1 HF, update to a version that includes HF or later. For Enterprise Manager versions 3.0.0 through 3.1.1, update to a version that is not affected. For BIG-IQ Cloud and Security versions 4.0.0 through 4.5.0, update to a version that is not affected. For BIG-IQ Device versions 4.2.0 through 4.5.0, update to a version that is not affected. For BIG-IQ ADC version 4.5.0, update to a version that is not affected.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-5516

Affected Products

Big-Iq Adc

Big-Iq Cloud/Security

Big-Iq Device

Enterprise Manager

F5 Big-Ip Apm

F5 Big-Ip Afm/Pem

F5 Big-Ip Apm/Asm

F5 Big-Ip Analytics

F5 Big-Ip Edge Gateway

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-5516 · Security Note
• https://support.f5.com/kb/en-us/solutions/public/k/00/sol00032124.html · Vendor Advisory
• http://securitytracker.com/id/1034686 · Note
• http://securitytracker.com/id/1034687 · Note