CVE-2015-5516
Last modified
CVE-2015-5516 is a vulnerability of currently unknown severity. Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Analytics 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP APM and ASM 10.1.0 through 10.2.4, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, and 11.3.0, BIG-IP PSM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, and 11.4.x before 11.4.1 HF, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 might allow remote attackers to cause a denial of service (memory consumption) via a large number of crafted UDP packets.. EPSS estimates a 2.87% chance of exploitation in the next 30 days.
Description
Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Analytics 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP APM and ASM 10.1.0 through 10.2.4, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, and 11.3.0, BIG-IP PSM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, and 11.4.x before 11.4.1 HF, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 might allow remote attackers to cause a denial of service (memory consumption) via a large number of crafted UDP packets.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Iq Application Delivery Controller | 4.5.0 |
| F5 | Big-Ip Local Traffic Manager | 10.0.0 |
| F5 | Big-Ip Local Traffic Manager | 10.0.1 |
| F5 | Big-Ip Local Traffic Manager | 10.1.0 |
| F5 | Big-Ip Local Traffic Manager | 10.2.0 |
| F5 | Big-Ip Local Traffic Manager | 10.2.1 |
| F5 | Big-Ip Local Traffic Manager | 10.2.2 |
| F5 | Big-Ip Local Traffic Manager | 10.2.3 |
| F5 | Big-Ip Local Traffic Manager | 10.2.4 |
| F5 | Big-Ip Local Traffic Manager | 11.0.0 |
| F5 | Big-Ip Local Traffic Manager | 11.1.0 |
| F5 | Big-Ip Local Traffic Manager | 11.2.0 |
| F5 | Big-Ip Local Traffic Manager | 11.2.1 |
| F5 | Big-Ip Local Traffic Manager | 11.3.0 |
| F5 | Big-Ip Local Traffic Manager | 11.4.0 |
| F5 | Big-Ip Local Traffic Manager | 11.4.1 |
| F5 | Big-Ip Local Traffic Manager | 11.5.0 |
| F5 | Big-Ip Local Traffic Manager | 11.5.1 |
| F5 | Big-Ip Local Traffic Manager | 11.5.2 |
| F5 | Big-Ip Local Traffic Manager | 11.5.3 |
| F5 | Big-Ip Local Traffic Manager | 11.6.0 |
| F5 | Big-Ip Access Policy Manager | 10.1.0 |
| F5 | Big-Ip Access Policy Manager | 10.2.0 |
| F5 | Big-Ip Access Policy Manager | 10.2.1 |
| F5 | Big-Ip Access Policy Manager | 10.2.2 |
| F5 | Big-Ip Access Policy Manager | 10.2.3 |
| F5 | Big-Ip Access Policy Manager | 10.2.4 |
| F5 | Big-Ip Access Policy Manager | 11.0.0 |
| F5 | Big-Ip Access Policy Manager | 11.1.0 |
| F5 | Big-Ip Access Policy Manager | 11.2.0 |
| F5 | Big-Ip Access Policy Manager | 11.2.1 |
| F5 | Big-Ip Access Policy Manager | 11.3.0 |
| F5 | Big-Ip Access Policy Manager | 11.4.0 |
| F5 | Big-Ip Access Policy Manager | 11.4.1 |
| F5 | Big-Ip Access Policy Manager | 11.5.0 |
| F5 | Big-Ip Access Policy Manager | 11.5.1 |
| F5 | Big-Ip Access Policy Manager | 11.5.2 |
| F5 | Big-Ip Access Policy Manager | 11.5.3 |
| F5 | Big-Ip Access Policy Manager | 11.6.0 |
| F5 | Big-Ip Edge Gateway | 10.1.0 |
| F5 | Big-Ip Edge Gateway | 10.2.0 |
| F5 | Big-Ip Edge Gateway | 10.2.1 |
| F5 | Big-Ip Edge Gateway | 10.2.2 |
| F5 | Big-Ip Edge Gateway | 10.2.3 |
| F5 | Big-Ip Edge Gateway | 10.2.4 |
| F5 | Big-Ip Edge Gateway | 11.0.0 |
| F5 | Big-Ip Edge Gateway | 11.1.0 |
| F5 | Big-Ip Edge Gateway | 11.2.0 |
| F5 | Big-Ip Edge Gateway | 11.2.1 |
| F5 | Big-Ip Edge Gateway | 11.3.0 |
Showing 50 of 193 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-5516?
How severe is CVE-2015-5516?
How do I fix CVE-2015-5516?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-5510Open redirect vulnerability in the Content Construction Kit …
- CVE-2015-5511The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 f…
- CVE-2015-5512The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x be…
- CVE-2015-5513Cross-site scripting (XSS) vulnerability in the Shibboleth a…
- CVE-2015-5514Cross-site scripting (XSS) vulnerability in the Migrate modu…
- CVE-2015-5515The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x b…
- CVE-2015-5519Cross-site scripting (XSS) vulnerability in the applyConvolu…
- CVE-2015-5520Cross-site scripting (XSS) vulnerability in the Users module…
- CVE-2015-5521Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1…4.8
- CVE-2015-5522Heap-based buffer overflow in the ParseValue function in lex…
- CVE-2015-5523The ParseValue function in lexer.c in tidy before 4.9.31 all…
- CVE-2015-5524An issue was discovered on Samsung mobile devices with KK(4.…9.8
Are you affected by CVE-2015-5516?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
