Skip to content
OpenAdvisories
High · 7.5 CVE-2025-41433 EUVD-2025-13941GHSA-h5pv-2m79-7p5p

BIG-IP SIP ALG profile vulnerability

Published May 7, 2025 · Updated May 8, 2025 · Assigned by f5

Description

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.2, 16.1.0 – < 16.1.5, 15.1.0 17.1.2

Advisories 2

References