Security Advisory

CVE-2025-54500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-13 14:46:55
Last updated 2025-11-03 20:06:30
Assigner f5
CVSS score 5.3
State PUBLISHED

Description

An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.