CVE-2015-7759: F5 BIG-IP Access Policy Manager

Low severity, CVSS 3.7. EPSS: 1.5% chance of exploitation in the next 30 days.

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.

Affected products

• F5 BIG-IP Access Policy Manager: version 12.0.0 only
• F5 BIG-IP Advanced Firewall Manager: version 12.0.0 only
• F5 BIG-IP Analytics: version 12.0.0 only
• F5 BIG-IP Application Acceleration Manager: version 12.0.0 only
• F5 BIG-IP Application Security Manager: version 12.0.0 only
• F5 BIG-IP Link Controller: version 12.0.0 only
• F5 BIG-IP Local Traffic Manager: version 12.0.0 only
• F5 BIG-IP Policy Enforcement Manager: version 12.0.0 only

Published 2016-01-12. Last modified 2026-06-17.