cnvd - cnvd-2025-07323

cnvd-2025-07323

Vulnerability from cnvd

Title: F5 BIG-IP PEM存在未明漏洞

Description:

F5 BIG-IP PEM是美国F5公司的使用在BIG-IP中的一款策略执行器。

F5 BIG-IP PEM存在安全漏洞，该漏洞是由于当BIG-IP PEM控制平面侦听器虚拟服务器配置有Diameter Endpoint配置文件时，攻击者可利用该漏洞导致虚拟服务器停止处理新的客户端连接并导致内存资源利用率增加。

Severity: 高

Patch Name: F5 BIG-IP PEM存在未明漏洞的补丁

Patch Description:

F5 BIG-IP PEM是美国F5公司的使用在BIG-IP中的一款策略执行器。

F5 BIG-IP PEM存在安全漏洞，该漏洞是由于当BIG-IP PEM控制平面侦听器虚拟服务器配置有Diameter Endpoint配置文件时，攻击者可利用该漏洞导致虚拟服务器停止处理新的客户端连接并导致内存资源利用率增加。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://my.f5.com/manage/s/article/K000139778

Reference: https://my.f5.com/manage/s/article/K000139778

Impacted products

Name
['F5 BIG-IP PEM >=17.1.0，<=17.1.1', 'F5 BIG-IP PEM >=16.1.0，<=16.1.4', 'F5 BIG-IP PEM >=15.1.0，<=15.1.10']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-22891",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-22891"
    }
  },
  "description": "F5 BIG-IP PEM\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4f7f\u7528\u5728BIG-IP\u4e2d\u7684\u4e00\u6b3e\u7b56\u7565\u6267\u884c\u5668\u3002\n\nF5 BIG-IP PEM\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u5f53BIG-IP PEM\u63a7\u5236\u5e73\u9762\u4fa6\u542c\u5668\u865a\u62df\u670d\u52a1\u5668\u914d\u7f6e\u6709Diameter Endpoint\u914d\u7f6e\u6587\u4ef6\u65f6\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u865a\u62df\u670d\u52a1\u5668\u505c\u6b62\u5904\u7406\u65b0\u7684\u5ba2\u6237\u7aef\u8fde\u63a5\u5e76\u5bfc\u81f4\u5185\u5b58\u8d44\u6e90\u5229\u7528\u7387\u589e\u52a0\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://my.f5.com/manage/s/article/K000139778",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-07323",
  "openTime": "2025-04-16",
  "patchDescription": "F5 BIG-IP PEM\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4f7f\u7528\u5728BIG-IP\u4e2d\u7684\u4e00\u6b3e\u7b56\u7565\u6267\u884c\u5668\u3002\r\n\r\nF5 BIG-IP PEM\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u5f53BIG-IP PEM\u63a7\u5236\u5e73\u9762\u4fa6\u542c\u5668\u865a\u62df\u670d\u52a1\u5668\u914d\u7f6e\u6709Diameter Endpoint\u914d\u7f6e\u6587\u4ef6\u65f6\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u865a\u62df\u670d\u52a1\u5668\u505c\u6b62\u5904\u7406\u65b0\u7684\u5ba2\u6237\u7aef\u8fde\u63a5\u5e76\u5bfc\u81f4\u5185\u5b58\u8d44\u6e90\u5229\u7528\u7387\u589e\u52a0\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "F5 BIG-IP PEM\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "F5 BIG-IP PEM \u003e=17.1.0\uff0c\u003c=17.1.1",
      "F5 BIG-IP PEM \u003e=16.1.0\uff0c\u003c=16.1.4",
      "F5 BIG-IP PEM \u003e=15.1.0\uff0c\u003c=15.1.10"
    ]
  },
  "referenceLink": "https://my.f5.com/manage/s/article/K000139778",
  "serverity": "\u9ad8",
  "submitTime": "2025-02-18",
  "title": "F5 BIG-IP PEM\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2025-22891 (GCVE-0-2025-22891)

Vulnerability from cvelistv5

Published

2025-02-05 17:31

Modified

2025-02-05 18:21

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CWE

CWE-772 - Missing Release of Resource after Effective Lifetime

Summary

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

▼	URL	Tags
	https://my.f5.com/manage/s/article/K000139778	vendor-advisory

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Version: 17.1.0 < 17.1.2 Version: 16.1.0 < 16.1.5 Version: 15.1.0 < *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-22891",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-05T18:21:03.667204Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T18:21:12.073Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "PEM"
          ],
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "17.1.2",
              "status": "affected",
              "version": "17.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.5",
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "HotfixBIGIP-15.1.10.6.0.11.6-ENG.iso",
                  "status": "unaffected"
                }
              ],
              "lessThan": "*",
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "F5"
        }
      ],
      "datePublic": "2025-02-05T15:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ],
          "value": "When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-772",
              "description": "CWE-772 Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-05T17:31:01.627Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://my.f5.com/manage/s/article/K000139778"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "BIG-IP PEM Vulnerability",
      "x_generator": {
        "engine": "F5 SIRTBot v1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2025-22891",
    "datePublished": "2025-02-05T17:31:01.627Z",
    "dateReserved": "2025-01-22T00:16:50.290Z",
    "dateUpdated": "2025-02-05T18:21:12.073Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted