F5 BIG-IP DNS Cache Vulnerability CVE-2025-59781 Advisory

Critical Vulnerability Information Vulnerability ID CVE-2025-59781 Vulnerability Description BIG-IP DNS Cache Vulnerability: When DNS caching is configured on a BIG-IP or BIG-IP Next DNS virtual server, uncontrolled DNS queries may lead to increased resource utilization. Impact System performance degradation and increased response time for the system management interface, resulting in delayed access to network services. This may manifest as increased CPU usage, memory usage, or bandwidth consumption. Security Advisory Status Published: October 18, 2023 Updated: October 18, 2023 Affected Products BIG-IP DNS BIG-IP DNS-GO F5 Distributed Cloud and SaaS Services NCCX Other products Severity Rating CVSS v3.1 Score: High (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Recommended Actions If your version is listed as "Vulnerable," you can mitigate this vulnerability by installing the hotfixes listed in the "Fix Introduced" column. Configure protections to reduce exploitation risk; refer to filtering in K2472227 Security Settings Guide. For specific recommendations for BIG-IP products, refer to K247231 Common Mitigations for BIG-IP. Mitigation Measures We recommend mitigating the risk by applying the following measures: - Configure protections to reduce exploitation risk; refer to filtering in K2472227 Security Settings Guide. - For specific recommendations for BIG-IP products, refer to K247231 Common Mitigations for BIG-IP. Related Content K2472267 Overview of F5 Security Advisory Articles K2472277 Filtering in Security Settings Guide K2472287 Overview of F5 Default Security Policies K2472297 Overview of F5 Internal Threat Detection Policies K2472307 Managing and Monitoring F5 Product Logs — The F5 Way K247231 Common Security Enhancements for BIG-IP Products K247232 Overview of BIG-IP Data Plane Control Plane K247233 Contact F5 Support

Goal Reached Thanks to every supporter — we hit 100%!

F5 BIG-IP DNS Cache Vulnerability CVE-2025-59781 Advisory