Last Modified: Sep 14, 2023
Affected Product(s):
BIG-IP All, Install/Upgrade
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4
Fixed In:
15.1.0
Opened: Sep 13, 2018 Severity: 2-Critical
BIG-IP systems support directly upgrading to a new version from the previous two major BIG-IP versions. Thus, upgrading to BIG-IP version 15.x from BIG-IP version 13.x, 14.x or 15.x is supported. Similarly, tmsh and iControl REST interfaces allow a previous version to be specified, to interpret commands and format responses according to the specified schema versions. Thus, schema versions 13.x, 14.x and 15.x are supported by tmsh and iControlREST. However: Affected versions of BIG-IP version 15.x still load unsupported 12.x and 11.x tmsh schema versions. Affected versions of BIG-IP version 14.x still load unsupported 11.x tmsh schema versions.
Instances of tmsh consume more memory (averaging approximately 16MB per instance on BIG-IP version 15.1.0) due to loading unsupported 12.x and 11.x schemas. If a large number of tmsh instances are loaded (due to a large number of users logged in, and particularly a large number of remotely-authenticated users), tmsh memory consumption can contribute to out-of-memory conditions.
This occurs on affected versions of BIG-IP.
None.
Schema versions 12.x and 11.x are no longer loaded by tmsh or available via iControlREST, except for the following versions: 11.5.0, 11.5.4, 11.5.5, 12.0.0, 12.1.0
This may impact you if you are running BIG-IP version 15.1.0 or later and attempting to use tmsh schema versions or iControl REST API versions 12.x or 11.x, such as: -- Setting the current tmsh version to a 12.x or 11.x version: tmsh modify cli version active 12.1.3 -- Attempting to load a configuration saved in a Single Configuration File (SCF) from a 12.x or 11.x version: tmsh load sys config file my_saved_12.1.3_config.scf -- Specifying a 12.x or 11.x version when making iControl REST API calls: curl -sk -u admin:admin GET https://<mgmt.ip.address>/mgmt/tm/sys/console?ver=12.1.3 Note: This restriction does not affect upgrading from 12.x or 11.x versions, or loading configuration from a UCS file for such versions: tmsh load sys ucs my_saved_12.1.3_config.ucs This is because UCS files include a backup of the tmsh schema version under which they were saved, which is then imported as needed when loading the configuration from the UCS file.