Skip to content
OpenAdvisories
High · 7.5 CVE-2025-20045 EUVD-2025-2144GHSA-g7gf-f662-24xm

BIG-IP SIP MRF Vulnerability

Published Feb 5, 2025 · Updated Feb 5, 2025 · Assigned by f5

Description

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.2, 16.1.0 – < 16.1.5, 15.1.0 17.1.2

Advisories 2

References