Last Modified: Apr 05, 2025
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.5.0
Opened: Mar 07, 2025 Severity: 3-Major
On a VCMP guest, if a virtual server enters hardware syncookie mode due to a syn flood, and the vip is passing a significant amount of valid traffic, it may not exit syncooke mode.
Syncookies may continue to be issued even though the attack has stopped.
VCMP guest Hardware syncookie mode
Remove traffic from the virtual server until syncookies deactivates.
None