Bug ID 469825: Enforcer may crash when trying to match signatures on body of re-constructed request

Last Modified: Jul 18, 2026

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 hf1, 11.5.1 hf2, 11.5.1 hf3, 11.5.1 hf4, 11.5.1 hf5, 11.5.1 hf6, 11.5.1 hf7, 11.5.1 hf8, 11.5.1 hf9, 11.5.1 hf10, 11.5.1 hf11, 11.5.2, 11.5.2 hf1, 11.5.3, 11.5.3 hf1, 11.5.3 hf2, 11.5.4, 11.5.4 hf1, 11.5.4 hf2, 11.5.4 hf3, 11.5.4 hf4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10

Fixed In:
11.6.0

Opened: Jul 01, 2014

Severity: 2-Critical

Symptoms

The BIG-IP system may temporarily fail to process traffic.

Impact

The BIG-IP system may temporarily fail to process traffic.

Conditions

1. Configure blocking bot detection with fingerprint. 2. Send a POST request without a referrer with some payload that includes a content attack signature that gets a client side challenge response.

Workaround

N/A

Fix Information

We fixed an issue where rarely the Enforcer crashed when trying to match signatures on the body of a re-constructed POST request.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips