CVE-2025-22891
Fixed in a distro release EPSS <1%CVSS 7.5
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Products: F5 BIG-IP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE:Leap 16.0 | gosec | 2.25.0-bp160.1.1 |
| openSUSE:Tumbleweed | gosec | 2.24.0-1.1 |