Bug ID 570881: IPsec configuration mismatch in IKEv2 causes TMM crash in isakmp_parse_proposal ()

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Fixed In:
12.1.0, 11.6.1 HF2

Opened: Jan 30, 2016
Severity: 2-Critical

Symptoms

crash (NULL pointer access)

Impact

Traffic disrupted while tmm restarts.

Conditions

IPsec configuration mismatch in IKEv2 (for initiator and responder)

Workaround

use correct configuration

Fix Information

Proper reaction (connection reject) was added for improper configuration.

Behavior Change