Symptom
Memory use of pubd is seen increasing over time with several gRPC subscriptions configured to the following XPaths:
filter xpath /process-cpu-ios-xe-oper:cpu-usage/cpu-utilization
filter xpath /process-cpu-ios-xe-oper:cpu-usage/cpu-utilization/five-minutes
filter xpath /oc-platform:components/component/cpu/state
Memory exhaustion seen that causes the crash.
Conditions
Cat9k switch configured with grpc dial-out static subscriptions and when TCP connections to external collector are frequently disrupted.
No particular xpath is associated with this issue.
Workaround
Disable telemetry subscription configs.
Further Problem Description
The issue is fixed in 17.9.3/17.6.6
PSIRT Evaluation
The Cisco PSIRT has evaluated this issue and determined that it does not have a security impact that requires PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. There is no PSIRT restriction that prohibits making this bug visible.
If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation.
Additional information on Cisco's security vulnerability policy can be found at the following URL:
https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html
