CVE-2015-7759

Severity: low (CVSS 3.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-12 · updated 2026-06-17
Weakness: CWE-20

Description

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.

Affected products

F5 BIG-IP APM: 12.0.0
BIG-IP: 12.0.0
F5 Big-Ip Analytics: 12.0.0
F5 Networks, Inc. BIG-IP (AAM): 12.0.0
BIG-IP ASM: 12.0.0
F5 Big-Ip Link Controller: 12.0.0
F5 BIG-IP (LTM): 12.0.0
F5 Networks, Inc. BIG-IP (PEM): 12.0.0

References

http://www.securitytracker.com/id/1034627
https://support.f5.com/kb/en-us/solutions/public/k/22/sol22843911.html
http://www.securitytracker.com/id/1034627
https://support.f5.com/kb/en-us/solutions/public/k/22/sol22843911.html

Get alerted when CVE-2015-7759 or the next vulnerability affects your stack