Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1
Fixed In:
14.0.0, 13.1.0.2, 12.1.3.2, 11.6.3.2, 11.5.6
Opened: Oct 31, 2017 Severity: 2-Critical Related Article:
K02515009
BD crash or False reporting of signature ID 200023003.
Failover, traffic disturbance in the core case. False positive violation or blocking in the other scenario.
JSON/XML/parameters traffic (should not happen with the enforce value signature).
Removing attack signature 200023003 from the security policy stops the issue.
Fix a bug in the signatures engine that causes a false positive reporting of a signature. In some rare cases, this false reporting may cause a crash. A newly released attack signature update changes the signature in a way that it no longer causes the issue to happen.