CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-8240

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 80.2%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2015-8240

F5 » Big-Ip Access Policy Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1
F5 » Big-Ip Access Policy Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3
F5 » Big-Ip Access Policy Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0
F5 » Big-Ip Analytics » Version: 11.4.1

cpe:2.3:a:f5:big-ip_analytics:11.4.1
F5 » Big-Ip Analytics » Version: 11.5.3

cpe:2.3:a:f5:big-ip_analytics:11.5.3
F5 » Big-Ip Analytics » Version: 11.6.0

cpe:2.3:a:f5:big-ip_analytics:11.6.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3
F5 » Big-Ip Application Acceleration Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0
F5 » Big-Ip Application Security Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1
F5 » Big-Ip Application Security Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
F5 » Big-Ip Application Security Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0
F5 » Big-Ip Global Traffic Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1
F5 » Big-Ip Global Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3
F5 » Big-Ip Global Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0
F5 » Big-Ip Link Controller » Version: 11.4.1

cpe:2.3:a:f5:big-ip_link_controller:11.4.1
F5 » Big-Ip Link Controller » Version: 11.5.3

cpe:2.3:a:f5:big-ip_link_controller:11.5.3
F5 » Big-Ip Link Controller » Version: 11.6.0

cpe:2.3:a:f5:big-ip_link_controller:11.6.0
F5 » Big-Ip Local Traffic Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1
F5 » Big-Ip Local Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3
F5 » Big-Ip Local Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0
F5 » Big-Ip Protocol Security Module » Version: 11.4.1

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-8240

Products

Pricing

Contact Us