Bug ID 748081: Memory leak in Behavioral DoS module

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 14.1.0, 14.1.0.1

Fixed In:
15.0.0, 14.1.0.2, 13.1.1.5

Opened: Oct 27, 2018

Severity: 3-Major

Symptoms

TMM runs out of memory and restarts. The memory usage as shown in "tmctl memory_usage_stat", under module line tag "session" is noticed to be high, and keeps growing.

Impact

Traffic disrupted while tmm restarts.

Conditions

The issue is seen when BDoS feature is configured, and if there exits Custom or Auto Generated BDoS Signatures. When such signatures exist, the BDoS one second timer callback leaks memory.

Workaround

1. Disable BDoS feature. 2. Disable all configured and auto generated BDoS signatures using TMSH command: # cd dos-common # modify security dos dos-signature all { state disabled }

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips