Bug ID 1048949: TMM xdata leak on websocket connection with asm policy without websocket profile

Last Modified: Jul 09, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 17.0.0, 17.0.0.1, 17.0.0.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3

Fixed In:
17.1.1, 16.1.4, 15.1.9

Opened: Sep 23, 2021

Severity: 3-Major

Symptoms

Excessive memory consumption, tmm core.

Impact

Excessive memory consumption, tmm crash. Traffic disrupted while tmm restarts.

Conditions

- ASM provisioned - ASM policy attached to a virtual server - Websocket profile isn't attached to the virtual server - Long lived websocket connection with messages

Workaround

Attach the websocket profile to the virtual server

Fix Information

Fix asm code to avoid buffering websocket message without websocket profile

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips