CVE-2025-59781
HIGHDescription
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Is your site exposed to CVE-2025-59781?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_web_application_firewall |
| f5 | big-ip_analytics |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_visibility_and_reporting |
| f5 | big-ip_automation_toolchain |
| f5 | big-ip_carrier-grade_nat |
| f5 | big-ip_container_ingress_services |
| f5 | big-ip_ddos_hybrid_defender |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_edge_gateway |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_ssl_orchestrator |
| f5 | big-ip_webaccelerator |
| f5 | big-ip_websafe |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_web_application_firewall |
| f5 | big-ip_analytics |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_visibility_and_reporting |
| f5 | big-ip_automation_toolchain |
| f5 | big-ip_carrier-grade_nat |
| f5 | big-ip_container_ingress_services |
| f5 | big-ip_ddos_hybrid_defender |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_edge_gateway |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_ssl_orchestrator |
| f5 | big-ip_webaccelerator |
| f5 | big-ip_websafe |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_web_application_firewall |
| f5 | big-ip_analytics |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_visibility_and_reporting |
| f5 | big-ip_automation_toolchain |
| f5 | big-ip_carrier-grade_nat |
| f5 | big-ip_container_ingress_services |
| f5 | big-ip_ddos_hybrid_defender |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_edge_gateway |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_ssl_orchestrator |
| f5 | big-ip_webaccelerator |
| f5 | big-ip_websafe |
| f5 | big-ip_next_cloud-native_network_functions |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-59781? +
How severe is CVE-2025-59781? +
What products are affected by CVE-2025-59781? +
How do I check if I'm vulnerable to CVE-2025-59781? +
Related Vulnerabilities
Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing …
Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can …
Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. …
VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary …
A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and …
Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web …
