PT-2025-42353 · F5 · F5 Big-Ip

Published 2025-10-15 · Updated 2025-10-21 · CVE-2025-61951

Positive Technologies · (AI Summary)

CVSS v4.0

8.7

High

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions F5 BIG-IP (affected versions not specified)

Description An out-of-bounds read within the Traffic Management Microkernel (TMM) component can lead to a denial-of-service condition. This issue arises when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled alongside a Server SSL profile configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server also supports DTLS 1.2 with client authentication. The issue may cause the TMM to terminate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-61951

Affected Products

F5 Big-Ip

References · 8

• https://my.f5.com/manage/s/article/K000151309 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61951 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61951 · Vendor Advisory
• https://twitter.com/CVEnew/status/1978545075383882233 · Twitter Post
• https://t.me/cveNotify/139764 · Telegram Post
• https://t.me/CVEtracker/34997 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1978563484007694460 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1978514771784712459 · Twitter Post