medium5.0
CVE-2015-4638
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, B…
Impact
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 through 11.3.0, and BIG-IP PSM 11.2.1 through 11.4.1 allows remote attackers to cause a denial of service (Traffic Management Microkernel restart) via a fragmented packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Advanced Firewall Manager | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Analytics | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Application Security Manager | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Edge Gateway | Versions 11.2.1, 11.3.0 |
| F5 | Big-Ip Global Traffic Manager | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Link Controller | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Local Traffic Manager | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Policy Enforcement Manager | Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 |
| F5 | Big-Ip Protocol Security Module | Versions 11.2.1, 11.3.0, 11.4.0, 11.4.1 |
| F5 | Big-Ip Webaccelerator | Versions 11.2.1, 11.3.0 |