Bug ID 549800: Renaming a virtual server with an attached plugin can cause buffer overflow

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
11.6.0, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1

Opened: Oct 01, 2015

Severity: 3-Major

Related Article: K53086012

Symptoms

Renaming a virtual server (essentially, moving one virtual server to a new location, which effectively renames it) might cause buffer overflow and potentially result in Failover.

Impact

Buffer overflow and potentially failover.

Conditions

The database variable 'mcpd.mvenabled' must be set to 'true'. Also, when moving a virtual server, the new name must be longer than the original name.

Workaround

Do not use the move command. Instead, issue a delete followed by a create command in a transaction.

Fix Information

Renaming a virtual server now works as expected, and does not results in buffer overflow or failover.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips