Missing Release of Resource after Effective Lifetime
A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-220.127.116.11 or 12.1.0-18.104.22.168 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.
CWE-772 - Missing Release Of Resource After Effective Lifetime
'Missing release of resource after effective lifetime' is a weakness that occurs when software doesn't sufficiently release a resource (e.g. memory, CPU, disk space, etc.) after it is used. If not addressed, attackers can launch a denial of service attack (by allocating a resource and not releasing it).