Bug ID 699531: Potential TMM crash due to incorrect number of attributes in a PEM iRule command

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP PEM(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 14.0.0, 14.0.0.1, 14.0.0.2

Fixed In:
14.1.0, 14.0.0.3, 13.1.0.6, 12.1.3.6

Opened: Dec 20, 2017

Severity: 2-Critical

Symptoms

TMM crash.

Impact

Loss of service. Traffic disrupted while tmm restarts.

Conditions

An iRule with a PEM iRule command that does not have the minimum number of attributes.

Workaround

Make sure the PEM iRule command is called with at least the minimum number of parameters. For example, make sure to call 'PEM::subscriber config policy referential set' with referential policies.

Fix Information

The system now provides the correct number of attributes, preventing a NULL pointer dereference.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips