← Back

CVE-2015-4638

nvd nist
Published: Sep 18, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 through 11.3.0, and BIG-IP PSM 11.2.1 through 11.4.1 allows remote attackers to cause a denial of service (Traffic Management Microkernel restart) via a fragmented packet.

Affected (57)

F5
10 products
Big Ip Advanced Firewall Manager
Big Ip Analytics
Big Ip Application Security Manager
Big Ip Edge Gateway
Big Ip Global Traffic Manager
Big Ip Link Controller
Big Ip Local Traffic Manager
Big Ip Policy Enforcement Manager
Big Ip Protocol Security Module
Big Ip Webaccelerator
Configuration A
57 vulnerable
Vulnerable SoftwareAffected Versions
F5
Big Ip Advanced Firewall Manager
Version 11.3.0
Big Ip Advanced Firewall Manager
Version 11.4.0
Big Ip Advanced Firewall Manager
Version 11.4.1
Big Ip Advanced Firewall Manager
Version 11.5.0
Big Ip Advanced Firewall Manager
Version 11.5.1
Big Ip Advanced Firewall Manager
Version 11.5.2
Big Ip Advanced Firewall Manager
Version 11.6.0
F5
Big Ip Analytics
Version 11.3.0
Big Ip Analytics
Version 11.4.0
Big Ip Analytics
Version 11.4.1
Big Ip Analytics
Version 11.5.0
Big Ip Analytics
Version 11.5.1
Big Ip Analytics
Version 11.5.2
Big Ip Analytics
Version 11.6.0
F5
Big Ip Application Security Manager
Version 11.3.0
Big Ip Application Security Manager
Version 11.4.0
Big Ip Application Security Manager
Version 11.4.1
Big Ip Application Security Manager
Version 11.5.0
Big Ip Application Security Manager
Version 11.5.1
Big Ip Application Security Manager
Version 11.5.2
Big Ip Application Security Manager
Version 11.6.0
F5
Big Ip Edge Gateway
Version 11.2.1
Big Ip Edge Gateway
Version 11.3.0
F5
Big Ip Global Traffic Manager
Version 11.3.0
Big Ip Global Traffic Manager
Version 11.4.0
Big Ip Global Traffic Manager
Version 11.4.1
Big Ip Global Traffic Manager
Version 11.5.0
Big Ip Global Traffic Manager
Version 11.5.1
Big Ip Global Traffic Manager
Version 11.5.2
Big Ip Global Traffic Manager
Version 11.6.0
F5
Big Ip Link Controller
Version 11.3.0
Big Ip Link Controller
Version 11.4.0
Big Ip Link Controller
Version 11.4.1
Big Ip Link Controller
Version 11.5.0
Big Ip Link Controller
Version 11.5.1
Big Ip Link Controller
Version 11.5.2
Big Ip Link Controller
Version 11.6.0
F5
Big Ip Local Traffic Manager
Version 11.3.0
Big Ip Local Traffic Manager
Version 11.4.0
Big Ip Local Traffic Manager
Version 11.4.1
Big Ip Local Traffic Manager
Version 11.5.0
Big Ip Local Traffic Manager
Version 11.5.1
Big Ip Local Traffic Manager
Version 11.5.2
Big Ip Local Traffic Manager
Version 11.6.0
F5
Big Ip Policy Enforcement Manager
Version 11.3.0
Big Ip Policy Enforcement Manager
Version 11.4.0
Big Ip Policy Enforcement Manager
Version 11.4.1
Big Ip Policy Enforcement Manager
Version 11.5.0
Big Ip Policy Enforcement Manager
Version 11.5.1
Big Ip Policy Enforcement Manager
Version 11.5.2
Big Ip Policy Enforcement Manager
Version 11.6.0
F5
Big Ip Protocol Security Module
Version 11.2.1
Big Ip Protocol Security Module
Version 11.3.0
Big Ip Protocol Security Module
Version 11.4.0
Big Ip Protocol Security Module
Version 11.4.1
F5
Big Ip Webaccelerator
Version 11.2.1
Big Ip Webaccelerator
Version 11.3.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.