Skip to content
OpenAdvisories
High · 7.5 CVE-2025-24326 EUVD-2025-3675GHSA-7vr5-hcj8-96h7

BIG-IP Advanced WAF/ASM BADoS vulnerability

Published Feb 5, 2025 · Updated Feb 5, 2025 · Assigned by f5

Description

When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.2, 16.1.0 – < 16.1.5, 15.1.0 17.1.2

Advisories 2

References