CVE-2015-5058: Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Cont...

Security readout for executives and security teams

This flaw can let a remote attacker exhaust memory on affected F5 BIG-IP or BIG-IQ systems by sending many crafted ICMP packets. The likely business impact is denial of service, not data theft. Exposure matters most where affected virtual servers are reachable from untrusted networks. Organizations running the listed F5 BIG-IP 11.5.x or 11.6.0 builds, or BIG-IQ 4.4.0 through 4.5.0 products, may be exposed. Risk is higher for internet-facing or partner-facing virtual servers that can receive ICMP traffic. Treat this as a service availability risk for affected F5 infrastructure. It should be prioritized where F5 devices protect critical applications or are internet-facing, but the provided sources do not support claims of active exploitation or data compromise. Mitigation focus: Inventory F5 BIG-IP and BIG-IQ products against the affected versions listed in the CVE record.; For BIG-IP, apply F5-fixed hotfix levels or later versions named in the CVE description.; For BIG-IQ, review F5 SOL17047 because the bundle does not name fixed BIG-IQ versions..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.