CVE Vulnerabilities

CVE-2025-61935

Unchecked Return Value

Published: Oct 15, 2025 | Modified: Oct 21, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Affected Software

Name Vendor Start Version End Version
Big-ip_advanced_web_application_firewall F5 15.1.0 (including) 15.1.10.8 (excluding)
Big-ip_advanced_web_application_firewall F5 17.1.0 (including) 17.1.3 (excluding)
Big-ip_advanced_web_application_firewall F5 17.5.0 (including) 17.5.0 (including)
Big-ip_application_security_manager F5 15.1.0 (including) 15.1.10.8 (excluding)
Big-ip_application_security_manager F5 17.1.0 (including) 17.1.3 (excluding)
Big-ip_application_security_manager F5 17.5.0 (including) 17.5.0 (including)

Potential Mitigations

References