CVE-2025-59778CWE-770denial-of-service

CVE-2025-59778

High · published October 15, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

⚡ When misconfigured, the Allowed IP Addresses feature on F5OS-C can turn your containers into runaway trains, causing them to crash left and right! 🔥 Think of it like a bouncer at a nightclub who decides to ignore the guest list — suddenly, people are spilling in everywhere, and the club goes into chaos. Similarly, undisclosed traffic bypasses the control you set up, leading to unwanted container terminations. This vulnerability could lead to serious service disruptions, as multiple containers may terminate unexpectedly. If not addressed, this could impact your network operations and the reliability of your services, creating an absolute mess to clean up!

Put simply

Think of it like a bouncer at a nightclub who decides to ignore the guest list — suddenly, people are spilling in everywhere, and the club goes into chaos. Similarly, undisclosed traffic bypasses the control you set up, leading to unwanted container terminations. This issue arises when the Allowed IP Addresses feature on the F5OS-C control plane incorrectly handles certain traffic, resulting in the termination of multiple containers. This behavior indicates a lack of robust traffic management in the configured environment.

What to do

This vulnerability could lead to serious service disruptions, as multiple containers may terminate unexpectedly. If not addressed, this could impact your network operations and the reliability of your services, creating an absolute mess to clean up! To mitigate this vulnerability, check your F5OS-C configurations to ensure that the Allowed IP Addresses feature is set correctly. Additionally, monitor your container environments for any irregular traffic patterns and consider implementing stricter access controls. Keep your software up to date with the latest patches! You can tackle this challenge! By following these steps, you’ll have your containers safeguarded in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-10-15T18:15Z
Affected products (2)
ProductVersionsFixed in
f5/f5os-c≥ 1.6.0, ≤ 1.6.2—
f5/f5os-c≥ 1.8.0, < 1.8.21.8.2
References (1)
EPSS history
Timeline
  • 15 OCT 13:55Z
    VELOS partition container network vulnerability
    cvelistv5