Bug ID 425252: ASM BD process crash on malformed cookie.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.4.0

Fixed In:
11.5.0, 11.4.0 HF3

Opened: Jul 15, 2013

Severity: 2-Critical

Related Article: K14608

Symptoms

The BD process may crash on 11.4.0 under malicious input.

Impact

Unexpected reboot.

Conditions

11.4.0 only. ASM enabled.

Workaround

Upgrade to 11.4.0-hf3 or later.

Fix Information

We fixed a cookie parsing issue that sometimes caused the Enforcer to crash.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips