Last Modified: May 29, 2024
Affected Product(s):
BIG-IP AFM
Fixed In:
17.1.1
Opened: Sep 20, 2022 Severity: 3-Major
'DNS malformed' DoS vector drops valid DNS queries for qnames that begin with an underscore character.
Legitimate DNS queries are dropped by the DoS engine.
DoS is being offloaded in hardware.
-- Disable hardware DoS acceleration for all vectors (dos.forceswdos). or: -- Disable this specific DoS vector. -- In some cases, if the request is sent from a known valid IP, you can also add this IP address to an allow list; however, this will bypass all DoS vectors for this IP address.
'DNS malformed' DoS vector correctly handles valid DNS queries for qnames that begin with an underscore character.