High · published October 15, 2025
⚡ A sneaky traffic surge can make your Traffic Management Microkernel (TMM) hit the brakes and terminate unexpectedly! Think of it like a busy restaurant where too many customers show up at once, causing the kitchen to crash because it can’t handle the orders — chaos ensues! If left unaddressed, your virtual server could be left in the lurch, leading to service outages and frustrated users. Imagine your website going down just when everyone is trying to access it — absolutely devastating!
Think of it like a busy restaurant where too many customers show up at once, causing the kitchen to crash because it can’t handle the orders — chaos ensues! This vulnerability arises when an iRule using the ILX::call command takes on undisclosed traffic, causing the TMM to terminate unexpectedly, disrupting all traffic flow.
If left unaddressed, your virtual server could be left in the lurch, leading to service outages and frustrated users. Imagine your website going down just when everyone is trying to access it — absolutely devastating! To mitigate this, evaluate your virtual server configurations and consider patching to the latest version if you're on an affected release. Monitor your traffic patterns closely to avoid unexpected terminations and ensure proper error handling in your iRules. You've got this! Follow these steps and you'll keep your virtual server safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| f5/big-ip_access_policy_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_advanced_firewall_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_advanced_web_application_firewall | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_analytics | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_application_acceleration_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_application_security_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_application_visibility_and_reporting | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_automation_toolchain | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_carrier-grade_nat | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_container_ingress_services | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_ddos_hybrid_defender | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_domain_name_system | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_edge_gateway | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_fraud_protection_service | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_global_traffic_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_link_controller | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_local_traffic_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_policy_enforcement_manager | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_ssl_orchestrator | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_webaccelerator | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_websafe | ≥ 15.1.0, < 15.1.1.0.8 | 15.1.1.0.8 |
| f5/big-ip_access_policy_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_advanced_firewall_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_advanced_web_application_firewall | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_analytics | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_application_acceleration_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_application_security_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_application_visibility_and_reporting | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_automation_toolchain | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_carrier-grade_nat | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_container_ingress_services | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_ddos_hybrid_defender | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_domain_name_system | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_edge_gateway | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_fraud_protection_service | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_global_traffic_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_link_controller | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_local_traffic_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_policy_enforcement_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_ssl_orchestrator | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_webaccelerator | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_websafe | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_access_policy_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_access_policy_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_advanced_firewall_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_advanced_firewall_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_advanced_web_application_firewall | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_advanced_web_application_firewall | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_analytics | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_analytics | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_application_acceleration_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_application_acceleration_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_application_security_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_application_security_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_application_visibility_and_reporting | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_application_visibility_and_reporting | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_automation_toolchain | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_automation_toolchain | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_carrier-grade_nat | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_carrier-grade_nat | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_container_ingress_services | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_container_ingress_services | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_ddos_hybrid_defender | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_ddos_hybrid_defender | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_domain_name_system | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_domain_name_system | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_edge_gateway | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_edge_gateway | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_fraud_protection_service | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_fraud_protection_service | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_global_traffic_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_link_controller | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_link_controller | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_local_traffic_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_local_traffic_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_policy_enforcement_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_policy_enforcement_manager | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_ssl_orchestrator | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_ssl_orchestrator | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_webaccelerator | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_webaccelerator | ≥ 17.5.0, ≤ 17.5.1 | — |
| f5/big-ip_websafe | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_websafe | ≥ 17.5.0, ≤ 17.5.1 | — |