Bug ID 517441: apd may crash when RADIUS accounting message is greater than 2K

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.4.0, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF6, 11.5.3 HF2, 11.4.1 HF9

Opened: Apr 10, 2015

Severity: 3-Major

Symptoms

If the RADIUS Acct agent is configured for an access policy, and there are a lot of attributes with total size greater than 2K, apd may crash.

Impact

service becomes unavailable while restarting apd process

Conditions

RADIUS Acct agent is configured and an AP with numerous attributes in RADIUS Acct request

Workaround

None

Fix Information

The maximum size of RADIUS packet is now set to 4K (RFC2865). If the total size of attributes is greater than 4K, the packet will be truncated to 4K.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips