Bug ID 831325: HTTP PSM detects more issues with Transfer-Encoding headers

Last Modified: Jul 13, 2024

Affected Product(s):
BIG-IP AFM, LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3

Fixed In:
15.1.0, 15.0.1.1, 14.1.2.5, 13.1.3.4, 12.1.5.2

Opened: Sep 25, 2019

Severity: 2-Critical

Related Article: K10701310

Symptoms

HTTP PSM may not detect some invalid Transfer-Encoding headers.

Impact

Traffic is not alarmed/blocked as expected.

Conditions

HTTP PSM is used to detect HTTP RFC violations. A request with an invalid Transfer-Encoding header is sent.

Workaround

None.

Fix Information

HTTP PSM detects new cases of invalid Transfer-Encoding headers.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips