Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
16.0.0, 16.0.0.1
Fixed In:
16.1.0, 16.0.1
Opened: Jun 22, 2020 Severity: 2-Critical
After sending a HTTP response that would normally cause the underlying TCP connection to get closed, the BIG-IP system fails to close the TCP connection.
The TCP connection lives longer than needed, and even allows the client to send subsequent requests over the same connection.
- TCP profile is used. - HTTP profile is used. - HTTP::respond iRule command is used. - The HTTP filter sets the "Connection: close" header (for example, in response to a HTTP/1.0 request that does not request Keep-Alive behavior).
N/A
TCP connection is now closed as necessary after invoking the HTTP::respond iRule command.