K000150668: TMM vulnerability CVE-2025-41431

Security Advisory Description When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP systems in a traffic group. CVE-2025-41431 Impact Traffic in other traffic groups may be disrupted...

K000139571: BIG-IP HTTP vulnerability CVE-2025-36557

Security Advisory Description When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-36557 Impact Traffic is disrupted while the TMM process restarts. This...

K000140968: BIG-IP HTTP/2 vulnerability CVE-2025-41414

Security Advisory Description When HTTP/2 client and server profiles are simultaneously configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-41414 Impact Traffic is disrupted while the TMM process restarts. This vulnerability...

K000148591: Appliance mode BIG-IP iControl REST and tmsh vulnerability CVE-2025-31644

Security Advisory Description When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell tmsh command that may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from increased memory resource utilization...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other features. A security vulnerability exists in F5 BIG-IP that stems from RFC compliance configuration leading to TMM termination...

PT-2025-20305 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions affected versions not specified Description: The issue occurs when an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management...

PT-2025-20306 · F5 · Big-Ip +3

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Recommendations: At the...

PT-2025-20302 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue occurs when a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, and undisclosed responses can cause an increase in memory resource utilization. Recommendations: A...

PT-2025-20307 · F5 · Big-Ip +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Recommendations: At the moment, there is no information about a newe...

PT-2025-20301 · F5 · Big-Ip Pem

Name of the Vulnerable Software and Affected Versions: BIG-IP PEM affected versions not specified Description: The issue occurs when a BIG-IP PEM system is licensed with URL categorization and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server. In thi...

F5 Networks BIG-IP : BIG-IP APM PingAccess vulnerability (K000150598)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000150598 advisory. When a BIG-IP APM PingAccess profile is configured on a virtual server, undisclosed...

F5 Networks BIG-IP : TMM vulnerability (K000150668)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000150668 advisory. When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkern...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K000140919)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000140919 advisory. When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increas...

PT-2025-20309 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue occurs when a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server. In...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A code issue vulnerability exists in the F5 BIG-IP that stems from a SIP MRF ALG configuration that results in TMM termination...

PT-2025-20303 · F5 · Big-Ip Apm

Name of the Vulnerable Software and Affected Versions: BIG-IP APM affected versions not specified Description: The issue occurs when a BIG-IP APM virtual server is configured to use a PingAccess profile, allowing undisclosed requests to cause TMM to terminate. No information is provided about the...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K000140968)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.7.0.4.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140968 advisory. When HTTP/2 client and server profiles are simultaneously configured on a...

F5 Networks BIG-IP : BIG-IP HTTP vulnerability (K000139571)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000139571 advisory. When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests c...

F5 BIG-IP APM 安全漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM that stems from a PingAccess configuration that causes TMM to terminate...