Skip to content
OpenAdvisories
High · 7.5 CVE-2025-59478 EUVD-2025-34653GHSA-q2gw-g324-7822

BIG-IP AFM DoS protection profile vulnerability

Published Oct 15, 2025 · Updated Feb 26, 2026 · Assigned by f5

Description

When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.5.0 – < 17.5.1, 17.1.0 – < 17.1.3, 15.1.0 – < 15.1.10.8 17.5.1

Advisories 2

References