CVE-2018-5536

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-25 · updated 2026-06-17
Weakness: CWE-772

Description

A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.

Affected products

F5 BIG-IP APM: from 12.1.0 through 12.1.3.5; from 13.0.0 through 13.1.0.7; 14.0.0

References

http://www.securityfocus.com/bid/104922
https://support.f5.com/csp/article/K27391542
http://www.securityfocus.com/bid/104922
https://support.f5.com/csp/article/K27391542

Get alerted when CVE-2018-5536 or the next vulnerability affects your stack