Bug ID 501480: AFM DoS Single Endpoint Sweep and Flood Vectors crash TMM under heavy traffic.

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.2 HF1

Opened: Jan 16, 2015
Severity: 2-Critical

Symptoms

With AFM DoS Single Endpoint Sweep and Flood Vectors configured, TMM might crash while processing a huge amount of the configured attack traffic.

Impact

Traffic disrupted while tmm restarts.

Conditions

AFM DoS Single Endpoint Sweep and Flood attack vector is enabled in the AFM module.

Workaround

Do not configure the AFM DoS Single Endpoint Sweep and Flood Vector.

Fix Information

AFM DoS Single Endpoint Sweep and Flood Vectors now correctly handles traffic so that TMM does not crash.

Behavior Change