5
CVE-2015-4638
- EPSS 0.73%
- Published 18.09.2015 14:59:00
- Last modified 12.04.2025 10:46:40
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 through 11.3.0, and BIG-IP PSM 11.2.1 through 11.4.1 allows remote attackers to cause a denial of service (Traffic Management Microkernel restart) via a fragmented packet.
Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Advanced Firewall Manager Version11.3.0
F5 ≫ Big-ip Advanced Firewall Manager Version11.4.0
F5 ≫ Big-ip Advanced Firewall Manager Version11.4.1
F5 ≫ Big-ip Advanced Firewall Manager Version11.5.0
F5 ≫ Big-ip Advanced Firewall Manager Version11.5.1
F5 ≫ Big-ip Advanced Firewall Manager Version11.5.2
F5 ≫ Big-ip Advanced Firewall Manager Version11.6.0
F5 ≫ Big-ip Analytics Version11.3.0
F5 ≫ Big-ip Analytics Version11.4.0
F5 ≫ Big-ip Analytics Version11.4.1
F5 ≫ Big-ip Analytics Version11.5.0
F5 ≫ Big-ip Analytics Version11.5.1
F5 ≫ Big-ip Analytics Version11.5.2
F5 ≫ Big-ip Analytics Version11.6.0
F5 ≫ Big-ip Application Security Manager Version11.3.0
F5 ≫ Big-ip Application Security Manager Version11.4.0
F5 ≫ Big-ip Application Security Manager Version11.4.1
F5 ≫ Big-ip Application Security Manager Version11.5.0
F5 ≫ Big-ip Application Security Manager Version11.5.1
F5 ≫ Big-ip Application Security Manager Version11.5.2
F5 ≫ Big-ip Application Security Manager Version11.6.0
F5 ≫ Big-ip Edge Gateway Version11.2.1
F5 ≫ Big-ip Edge Gateway Version11.3.0
F5 ≫ Big-ip Global Traffic Manager Version11.3.0
F5 ≫ Big-ip Global Traffic Manager Version11.4.0
F5 ≫ Big-ip Global Traffic Manager Version11.4.1
F5 ≫ Big-ip Global Traffic Manager Version11.5.0
F5 ≫ Big-ip Global Traffic Manager Version11.5.1
F5 ≫ Big-ip Global Traffic Manager Version11.5.2
F5 ≫ Big-ip Global Traffic Manager Version11.6.0
F5 ≫ Big-ip Link Controller Version11.3.0
F5 ≫ Big-ip Link Controller Version11.4.0
F5 ≫ Big-ip Link Controller Version11.4.1
F5 ≫ Big-ip Link Controller Version11.5.0
F5 ≫ Big-ip Link Controller Version11.5.1
F5 ≫ Big-ip Link Controller Version11.5.2
F5 ≫ Big-ip Link Controller Version11.6.0
F5 ≫ Big-ip Local Traffic Manager Version11.3.0
F5 ≫ Big-ip Local Traffic Manager Version11.4.0
F5 ≫ Big-ip Local Traffic Manager Version11.4.1
F5 ≫ Big-ip Local Traffic Manager Version11.5.0
F5 ≫ Big-ip Local Traffic Manager Version11.5.1
F5 ≫ Big-ip Local Traffic Manager Version11.5.2
F5 ≫ Big-ip Local Traffic Manager Version11.6.0
F5 ≫ Big-ip Policy Enforcement Manager Version11.3.0
F5 ≫ Big-ip Policy Enforcement Manager Version11.4.0
F5 ≫ Big-ip Policy Enforcement Manager Version11.4.1
F5 ≫ Big-ip Policy Enforcement Manager Version11.5.0
F5 ≫ Big-ip Policy Enforcement Manager Version11.5.1
F5 ≫ Big-ip Policy Enforcement Manager Version11.5.2
F5 ≫ Big-ip Policy Enforcement Manager Version11.6.0
F5 ≫ Big-ip Protocol Security Module Version11.2.1
F5 ≫ Big-ip Protocol Security Module Version11.3.0
F5 ≫ Big-ip Protocol Security Module Version11.4.0
F5 ≫ Big-ip Protocol Security Module Version11.4.1
F5 ≫ Big-ip Webaccelerator Version11.2.1
F5 ≫ Big-ip Webaccelerator Version11.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.73% | 0.716 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.