CVE-2025-21087
Published: 05 February 2025
Description
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Security Summary
CVE-2025-21087 is a denial-of-service vulnerability affecting F5 BIG-IP systems. It occurs when Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, allowing undisclosed traffic to cause an increase in memory and CPU resource utilization. The issue is classified under CWE-400 (Uncontrolled Resource Consumption) and carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Software versions that have reached End of Technical Support (EoTS) are not evaluated for this vulnerability.
Remote, unauthenticated attackers can exploit this vulnerability over the network with low complexity and no user interaction required. By sending the undisclosed traffic to affected configurations, attackers can trigger excessive resource consumption, leading to degraded performance or complete denial of service due to high availability impact.
The F5 security advisory, available at https://my.f5.com/manage/s/article/K000134888, provides further details on the vulnerability.
Details
- CWE(s)