Unrated severityNVD Advisory· Published Feb 5, 2025· Updated Feb 5, 2025
BIG-IP PEM Vulnerability
CVE-2025-22891
Description
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/gosec&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/gosec&distro=openSUSE%20Tumbleweed
< 2.25.0-bp160.1.1+ 1 more
- (no CPE)range: < 2.25.0-bp160.1.1
- (no CPE)range: < 2.24.0-1.1
Patches
Vulnerability mechanics
References
1- my.f5.com/manage/s/article/K000139778mitrevendor-advisory
News mentions
0No linked articles in our index yet.