← All advisories

Unrated severityNVD Advisory· Published May 7, 2025· Updated May 8, 2025

BIG-IP HTTP/2 vulnerability

CVE-2025-41414

Description

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

3

F5, Inc./Big IPcpe-rescue
Range: 17.1.0
F5/BIG-IP Next CNFv5
Range: 1.1.0
F5, Inc./Big IP Spkcpe-rescue
Range: 1.8.0

Patches

Vulnerability mechanics

References

1

my.f5.com/manage/s/article/K000140968mitrevendor-advisory

News mentions

0

No linked articles in our index yet.