CVE-2015-5058: F5 BIG-IP Access Policy Manager

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted ICMP packets.

Affected products

• F5 BIG-IP Access Policy Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Advanced Firewall Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Analytics: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Application Acceleration Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Application Security Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Global Traffic Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Link Controller: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IP Local Traffic Manager: version 11.5.1 only; version 11.5.3 only; version 11.6.0 only
• F5 BIG-IQ ADC: version 4.5.0 only
• F5 BIG-IQ Cloud: version 4.4.0 only; version 4.5.0 only
• F5 BIG-IQ Device: version 4.4.0 only; version 4.5.0 only
• F5 BIG-IQ Security: version 4.4.0 only; version 4.5.0 only

Published 2015-08-24. Last modified 2026-06-17.