Skip to content
OpenAdvisories
High · 7.5 CVE-2025-61951 EUVD-2025-34636GHSA-jhf6-4mp5-3v7c

BIG-IP DTLS 1.2 Vulnerability

Published Oct 15, 2025 · Updated Feb 26, 2026 · Assigned by f5

Description

Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.5.0 – < 17.5.1, 17.1.0 – < 17.1.3, 16.1.0 – < 16.1.6.1 17.5.1

Advisories 2

References