Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 17.0.0, 17.0.0.1, 17.0.0.2
Fixed In:
17.1.0, 16.1.4, 15.1.9
Opened: Sep 16, 2022 Severity: 3-Major
The BIG-IP fails to remove chunk headers when compressing a chunked response from a pool member. The chunk headers are compressed and delivered to the client as part of the payload.
Chunk header and terminating 0 length chunk are compressed and delivered to the client as part of the payload, resulting in broken application functionality.
-- Version with the fix for ID902377 -- Rewrite/HTML profile -- Compression profile -- Chunked response from pool member (With "Transfer-Encoding: Chunked" header) -- HTTP response eligible for compression
One of the following: - Change HTTP response-chunking to either 'unchunk' or 'rechunk' in the HTTP profile for the virtual server. - Remove the compression profile. - Modify the compression profile to ensure the response in question is no longer eligible for compression.
None