VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 13, 2025· Updated Nov 3, 2025

HTTP/2 Vulnerability

CVE-2025-54500

Description

An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

5
  • F5/BIG-IPv5
    Range: 17.5.0
  • F5/BIG-IP Nextv5
    Range: 20.3.0
  • F5/BIG-IP Next CNFv5
    Range: 2.0.0
  • F5/BIG-IP Next for Kubernetesv5
    Range: 2.0.0
  • F5/BIG-IP Next SPKv5
    Range: 2.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.