Last Modified: Dec 18, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3
Fixed In:
17.1.2, 16.1.5
Opened: May 24, 2021 Severity: 2-Critical
TMM crashes while passing APM traffic.
Traffic disrupted while tmm restarts.
-- LTM + APM deployment. -- Allow list in use. -- iRules in use.
#--- logout_irule starts when HTTP_REQUEST { if { ([string tolower [HTTP::uri]] contains "closeconnection.aspx" || [string tolower [HTTP::uri]] contains "signout.aspx") && [ACCESS::session exists -state_allow -sid [HTTP::cookie MRHSession]] } { HTTP::respond 200 content {<html><body><h1>You are now logged out.</h1></body></html>}\ "Set-Cookie" "F5_ST=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/"\ "Set-Cookie" "MRHSHint=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/"\ "Set-Cookie" "F5_HT_shrinked=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/"\ "Set-Cookie" "F5_fullWT=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/"\ "Set-Cookie" "LastMRH_Session=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/"\ "Set-Cookie" "MRHSession=deleted;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/" ACCESS::session remove log local0. "iRule logout triggered: Removing access session for [ACCESS::session sid]" # disable HTTP_REQUEST events for all other iRules event disable } } #--- logout_irule ends
Fixed a TMM crash that can occur while processing iRules.