Bug ID 570881: IPsec configuration mismatch in IKEv2 causes TMM crash in isakmp_parse_proposal ()

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 11.6.1 HF2

Opened: Jan 30, 2016

Severity: 2-Critical

Symptoms

crash (NULL pointer access)

Impact

Traffic disrupted while tmm restarts.

Conditions

IPsec configuration mismatch in IKEv2 (for initiator and responder)

Workaround

use correct configuration

Fix Information

Proper reaction (connection reject) was added for improper configuration.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips