Bug ID 537072: Fix ssl_session memory corruption when many sessions and heavy traffic.

Last Modified: Jul 13, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1

Fixed In:
12.0.0, 11.6.3.2

Opened: Aug 01, 2015

Severity: 2-Critical

Symptoms

ssl_session memory corruption might occur when there are many sessions and heavy traffic. The SSL session is freed but not removed from cache. The cache contains the freed SSL session which can cause a crash when the cache entry is removed later.

Impact

ssl_session memory corruption.

Conditions

Many SSL session and heavy traffic.

Workaround

None.

Fix Information

This memory corruption issue no longer occurs.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips