CVE-2025-21087

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Feb 5, 2025
Source updated: Feb 5, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

TMM Vulnerability

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

BIG-IP

Vendor: F5
Product: BIG-IP
Platforms: Unknown
Default status: unknown

BIG-IP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
17.1.0	`affected`	custom	17.1.2	Unavailable	None listed
16.1.0	`affected`	custom	*	Unavailable	`Hotfix-BIGIP-16.1.5.2.0.7.5-ENG.iso` → `unaffected`
15.1.0	`affected`	custom	*	Unavailable	`Hotfix-BIGIP-15.1.10.6.0.11.6-ENG.iso` → `unaffected`

BIG-IP Next

Vendor: F5
Product: BIG-IP Next
Platforms: Unknown
Default status: unknown

BIG-IP Next · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
20.0.0	`affected`	custom	20.1.0	Unavailable	None listed