CVE-2025-54500

🗓️ 13 Aug 2025 15:15:38Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 2 Views

CVE-2025-54500 DoS via malformed HTTP/2 frames breaking max concurrent streams (MadeYouReset).

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2025-54500	18 Aug 202508:41	–	circl
CNNVD	F5 BIG-IP APM 安全漏洞	13 Aug 202500:00	–	cnnvd
CVE	CVE-2025-54500	13 Aug 202514:46	–	cve
Cvelist	CVE-2025-54500 HTTP/2 Vulnerability	13 Aug 202514:46	–	cvelist
EUVD	EUVD-2025-24575	3 Oct 202520:07	–	euvd
F5 Networks	K000152001: HTTP/2 vulnerability CVE-2025-54500	13 Aug 202513:45	–	f5
F5 Networks	K000152635: Quarterly Security Notification (August 2025)	13 Aug 202513:48	–	f5
Tenable Nessus	F5 Networks BIG-IP : HTTP/2 vulnerability (K000152001)	14 Aug 202500:00	–	nessus
OSV	CVE-2025-54500	13 Aug 202515:15	–	osv
Positive Technologies	PT-2025-33005	13 Aug 202500:00	–	ptsecurity

NVD

Node

f5 big-ip_access_policy_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_advanced_firewall_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_advanced_web_application_firewallRange15.1.0–15.1.10.8

OR

f5 big-ip_analyticsRange15.1.0–15.1.10.8

OR

f5 big-ip_application_acceleration_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_application_security_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_application_visibility_and_reportingRange15.1.0–15.1.10.8

OR

f5 big-ip_automation_toolchainRange15.1.0–15.1.10.8

OR

f5 big-ip_carrier-grade_natRange15.1.0–15.1.10.8

OR

f5 big-ip_container_ingress_servicesRange15.1.0–15.1.10.8

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.10.8

OR

f5 big-ip_domain_name_systemRange15.1.0–15.1.10.8

OR

f5 big-ip_edge_gatewayRange15.1.0–15.1.10.8

OR

f5 big-ip_fraud_protection_serviceRange15.1.0–15.1.10.8

OR

f5 big-ip_global_traffic_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_link_controllerRange15.1.0–15.1.1.0.8

OR

f5 big-ip_local_traffic_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_policy_enforcement_managerRange15.1.0–15.1.10.8

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.10.8

OR

f5 big-ip_webacceleratorRange15.1.0–15.1.10.8

OR

f5 big-ip_websafeRange15.1.0–15.1.10.8

Node

f5 big-ip_access_policy_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_advanced_firewall_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_advanced_web_application_firewallRange16.1.0–16.1.6.1

OR

f5 big-ip_analyticsRange16.1.0–16.1.6.1

OR

f5 big-ip_application_acceleration_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_application_security_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_application_visibility_and_reportingRange16.1.0–16.1.6.1

OR

f5 big-ip_automation_toolchainRange16.1.0–16.1.6.1

OR

f5 big-ip_carrier-grade_natRange16.1.0–16.1.6.1

OR

f5 big-ip_container_ingress_servicesRange16.1.0–16.1.6.1

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.6.1

OR

f5 big-ip_domain_name_systemRange16.1.0–16.1.6.1

OR

f5 big-ip_edge_gatewayRange16.1.0–16.1.6.1

OR

f5 big-ip_fraud_protection_serviceRange16.1.0–16.1.6.1

OR

f5 big-ip_global_traffic_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_link_controllerRange16.1.0–16.1.6.1

OR

f5 big-ip_local_traffic_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_policy_enforcement_managerRange16.1.0–16.1.6.1

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.6.1

OR

f5 big-ip_webacceleratorRange16.1.0–16.1.6.1

OR

f5 big-ip_websafeRange16.1.0–16.1.6.1

Node

f5 big-ip_access_policy_managerRange17.1.0–17.1.3

OR

f5 big-ip_access_policy_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_advanced_firewall_managerRange17.1.0–17.1.3

OR

f5 big-ip_advanced_firewall_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_advanced_web_application_firewallRange17.1.0–17.1.3

OR

f5 big-ip_advanced_web_application_firewallRange17.5.0–17.5.1.2

OR

f5 big-ip_analyticsRange17.1.0–17.1.3

OR

f5 big-ip_analyticsRange17.5.0–17.5.1.2

OR

f5 big-ip_application_acceleration_managerRange17.1.0–17.1.3

OR

f5 big-ip_application_acceleration_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_application_security_managerRange17.1.0–17.1.3

OR

f5 big-ip_application_security_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_application_visibility_and_reportingRange17.1.0–17.1.3

OR

f5 big-ip_application_visibility_and_reportingRange17.5.0–17.5.1.2

OR

f5 big-ip_automation_toolchainRange17.1.0–17.1.3

OR

f5 big-ip_automation_toolchainRange17.5.0–17.5.1.2

OR

f5 big-ip_carrier-grade_natRange17.1.0–17.1.3

OR

f5 big-ip_carrier-grade_natRange17.5.0–17.5.1.2

OR

f5 big-ip_container_ingress_servicesRange17.1.0–17.1.3

OR

f5 big-ip_container_ingress_servicesRange17.5.0–17.5.1.2

OR

f5 big-ip_ddos_hybrid_defenderRange17.1.0–17.1.3

OR

f5 big-ip_ddos_hybrid_defenderRange17.5.0–17.5.1.2

OR

f5 big-ip_domain_name_systemRange17.1.0–17.1.3

OR

f5 big-ip_domain_name_systemRange17.5.0–17.5.1.2

OR

f5 big-ip_edge_gatewayRange17.1.0–17.1.3

OR

f5 big-ip_edge_gatewayRange17.5.0–17.5.1.2

OR

f5 big-ip_fraud_protection_serviceRange17.1.0–17.1.3

OR

f5 big-ip_fraud_protection_serviceRange17.5.0–17.5.1.2

OR

f5 big-ip_global_traffic_managerRange17.1.0–17.1.3

OR

f5 big-ip_link_controllerRange17.1.0–17.1.3

OR

f5 big-ip_link_controllerRange17.5.0–17.5.1.2

OR

f5 big-ip_local_traffic_managerRange17.1.0–17.1.3

OR

f5 big-ip_local_traffic_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_policy_enforcement_managerRange17.1.0–17.1.3

OR

f5 big-ip_policy_enforcement_managerRange17.5.0–17.5.1.2

OR

f5 big-ip_ssl_orchestratorRange17.1.0–17.1.3

OR

f5 big-ip_ssl_orchestratorRange17.5.0–17.5.1.2

OR

f5 big-ip_webacceleratorRange17.1.0–17.1.3

OR

f5 big-ip_webacceleratorRange17.5.0–17.5.1.2

OR

f5 big-ip_websafeRange17.1.0–17.1.3

OR

f5 big-ip_websafeRange17.5.0–17.5.1.2

Node

f5 big-ip_next_central_managerMatch20.3.0

OR

f5 big-ip_next_cloud-native_network_functionsRange1.1.0–1.4.1

OR

f5 big-ip_next_cloud-native_network_functionsRange2.0.0–2.0.2

OR

f5 big-ip_next_for_kubernetesMatch2.0.0

OR

f5 big-ip_next_service_proxy_for_kubernetesRange1.7.0–1.9.2

OR

f5 big-ip_next_service_proxy_for_kubernetesRange2.0.0–2.0.2

OR

Source	Link
my	www.my.f5.com/manage/s/article/K000152001
kb	www.kb.cert.org/vuls/id/767506

04 Feb 2026 17:47Current

CVSS 3.15.3

CVSS 46.9

EPSS0.00151

hypertext transfer protocol malformed control frames denial of service madeyoureset attack max concurrent streams