Bug ID 501480: AFM DoS Single Endpoint Sweep and Flood Vectors crash TMM under heavy traffic.

Last Modified: Nov 07, 2022

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.10, 11.5.2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.2 HF1

Opened: Jan 16, 2015

Severity: 2-Critical

Symptoms

With AFM DoS Single Endpoint Sweep and Flood Vectors configured, TMM might crash while processing a huge amount of the configured attack traffic.

Impact

Traffic disrupted while tmm restarts.

Conditions

AFM DoS Single Endpoint Sweep and Flood attack vector is enabled in the AFM module.

Workaround

Do not configure the AFM DoS Single Endpoint Sweep and Flood Vector.

Fix Information

AFM DoS Single Endpoint Sweep and Flood Vectors now correctly handles traffic so that TMM does not crash.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips