Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP APM
Known Affected Versions:
15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 17.0.0.1, 17.0.0.2
Fixed In:
17.5.0, 17.1.2, 16.1.5
Opened: Nov 10, 2022 Severity: 3-Major
Kerberos SSO fails, and BIG-IP may reboot or become unresponsive with the following error log in /var/log/apm. err websso.7[8608]: OpenSSL: DRBG Continuous RNG test failed: DRBG stuck.
Traffic is disrupted while the system reboots or becomes unresponsive.
-- WebSSO is configured
None
Proper locking mechanisms have been introduced to prevent race conditions in multi-threaded WebSSO environments for the RAND_bytes API used in the OpenSSL crypto library.