CVE-2025-46706
published 2025-10-15CVE-2025-46706: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource…
PriorityP345high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.40%
32.7th percentile
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
75 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_access_policy_manager | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_advanced_firewall_manager | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_advanced_firewall_manager | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_advanced_waf | — | — |
| f5 | big-ip_advanced_web_application_firewall | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_advanced_web_application_firewall | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_analytics | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_application_acceleration_manager | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_application_security_manager | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_application_security_manager | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_application_visibility_and_reporting | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_application_visibility_and_reporting | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
| f5 | big-ip_asm | — | — |
| f5 | big-ip_automation_toolchain | — | — |
| f5 | big-ip_automation_toolchain | >= 16.1.0 < 16.1.6 | 16.1.6 |
| f5 | big-ip_automation_toolchain | >= 17.1.0 < 17.1.2.2 | 17.1.2.2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_msrc5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2025-46706: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause ...
vendor_f5·2025-10-15·CVSS 7.5
CVE-2025-46706 [HIGH] CWE-770 CVE-2025-46706: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause ...
CVE-2025-46706: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause ...
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP AVR, BIG-IP Advanced WAF, BIG-IP Analytics, BIG-IP CGNAT, BIG-IP DHD, BIG-IP DNS, BIG-IP Edge Gateway, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP Next CNF, BIG-IP PEM, BIG-IP SSLO, BIG-IP WebAccelerator, BIG-IP WebSafe, Big-Ip Automation Toolchain, Big-Ip Container Ingress Services, Big-Ip Next Service Prox
Microsoft
tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
vendor_msrc·2024-09-10·CVSS 5.5
CVE-2024-46706 [MEDIUM] tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: http
GHSA
GHSA-rv9w-j3p5-w2fp: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource ut
ghsa_unreviewed·2025-10-15
CVE-2025-46706 [HIGH] CWE-770 GHSA-rv9w-j3p5-w2fp: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource ut
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
No detection rules found.
No public exploits indexed.
Qualys
A Strategic Response to the F5 BIG-IP Nation-State Breach 2025
blogs_qualys·2025-10-18
A Strategic Response to the F5 BIG-IP Nation-State Breach 2025
## Table of Contents
CISAs KEV Inclusion Underscores the Severity of the F5 BIG-IP Breach
The Risk-Velocity Mismatch: F5 Patching Decelerates as Attacker Insight Accelerates
How Qualys Helps You Discover F5 Assets and Detect Related Vulnerabilities
Conclusion
In mid-October 2025, the cybersecurity landscape was dealt a severe blow. F5 disclosed a long-term, sophisticated breach by a nation-state threat actor. This incident exposed critical F5 BIG-IP vulnerabilities and triggered heightened scrutiny across enterprise edge infrastructure.
This was not a typical vulnerability disclosure. The attackers exfiltrated a strategic critical pair of assets: portions of BIG-IP source code, and internal details of undisclosed (unpatched) vulnerabilities.
## CISA’s KEV Inclusion Underscores the S
Qualys
F5 BIG-IP Vulnerabilities: Strategic Breach Response with Qualys | Qualys
blogs_qualys·2025-10-18
F5 BIG-IP Vulnerabilities: Strategic Breach Response with Qualys | Qualys
#### Table of Contents
- CISAs KEV Inclusion Underscores the Severity of the F5 BIG-IP Breach
- The Risk-Velocity Mismatch: F5 Patching Decelerates as Attacker Insight Accelerates
- How Qualys Helps You Discover F5 Assets and Detect Related Vulnerabilities
- Conclusion
In mid-October 2025, the cybersecurity landscape was dealt a severe blow. F5 disclosed a long-term, sophisticated breach by a nation-state threat actor. This incident exposed critical F5 BIG-IP vulnerabilities and triggered heightened scrutiny across enterprise edge infrastructure.
This was not a typical vulnerability disclosure. The attackers exfiltrated a strategic critical pair of assets: portions of BIG-IP source code, and internal details of undisclosed (unpatched) vulnerabilities.
## CISA’s KEV Inclusion Underscore
Tenable
FAQ on F5 Security Incident
blogs_tenable·2025-10-15
FAQ on F5 Security Incident
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
2025-10-15
Published