Last Modified: Oct 07, 2023
Affected Product(s):
BIG-IP AFM, ASM
Known Affected Versions:
11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
16.0.0, 12.1.0
Opened: Sep 22, 2015 Severity: 2-Critical
AVR has some uint32 counters for DoS statistics both in HW and SW. And these counters were getting overflowed with time.
Impact would only be seen on some DoS stats but functionality wise everything works fine without any issue.
When the box is running under heavy DoS traffic for few hours, DoS counters can overflow.
There was no workaround.
Counter overflow is now handled correctly for both HW and SW DoS.