Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7
Fixed In:
15.0.0, 14.1.2.8, 13.1.3
Opened: Mar 21, 2019 Severity: 2-Critical
TMM crashes and produces a core file. The crash is a SIGFPE accompanied by the following panic string: Assertion "packet must already have an ethernet header" failed.
Traffic disrupted while tmm restarts.
This issue occurs when all of the following conditions are met: - The system is provisioned for AFM. - A TCP Half Open attack to the system is underway. - A BIG-IP Administrator attempts to use the AFM Packet Tester tool, and simulates sending a TCP segment with the SYN flag set.
Do not use the AFM Packet Tester tool while a TCP Half Open attack is underway.
TMM no longer crashes when utilizing the AFM Packet Tester tool.