CVE-2022-23019

On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is configured with both Diameter Session and Router Profiles, undisclosed traffic can cause an increase in memory resource...

CVE-2022-23015

On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/require and Session Ticket enabled and configured, processing SSL traffic can cause an increase i...

CVE-2022-23029

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which ha...

CVE-2022-23010

On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:...

PT-2025-42348

Name of the Vulnerable Software and Affected Versions F5 BIG-IP and BIG-IP Next CNF affected versions not specified Description Undisclosed DNS queries can lead to increased memory resource utilization when the DNS cache is configured on a virtual server. This issue affects BIG-IP and BIG-IP Next...

PT-2025-42330

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists where, when an iRule is configured on a virtual server via the declarative API, the cleanup process during re-instantiation can lead to increased Traffic Management...

PT-2025-42320

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An iRule configured with the HTTP::respond command on a virtual server may lead to increased memory resource utilization due to undisclosed requests. Recommendations At the moment, there is...

PT-2025-42357

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists where, when a client SSL profile is configured on a virtual server, certain requests can lead to increased memory resource utilization. The nature of these requests is not...

CVE-2025-61974: Missing Release of Memory after Effective Lifetime

When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59781: Incomplete Cleanup

When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-47148: Improper Resource Shutdown or Release

When the BIG-IP system is configured as both a Security Assertion Markup Language SAML service provider SP and Identity Provider IdP, with single logout SLO enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have...

PT-2025-42321

Name of the Vulnerable Software and Affected Versions BIG-IP versions affected versions not specified Description The BIG-IP system, when configured as both a Security Assertion Markup Language SAML service provider SP and Identity Provider IdP with single logout SLO enabled on an access policy,...

EUVD-2023-45113

Malicious code in bioql PyPI...

EUVD-2022-31717

Malicious code in bioql PyPI...

EUVD-2022-38128

Malicious code in bioql PyPI...

CVE-2025-36504 BIG-IP HTTP/2 vulnerability

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K000137709: SCTP vulnerability CVE-2025-41399

Security Advisory Description When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. CVE-2025-41399 Impact System performance can degrade until the Traffic Management Microkernel TMM...

CVE-2025-41399: Improper Resource Shutdown or Release

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-36504: Allocation of Resources Without Limits or Throttling

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : SCTP vulnerability (K000137709)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000137709 advisory. When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed...