Loading...
Loading...
The X509::cert_fields iRule command can leak memory in the 'method' memory subsystem if called with the 'subpubkey' argument, when the 'subpubkey' argument is not the last argument.
Memory will leak, eventually impacting the operation of tmm.
Create an iRule using X509::cert_fields where the subpubkey is not the last argument. Example/signature to look for: ltm rule rule_leak { when HTTP_REQUEST { if { [SSL::cert 0] ne "" } { HTTP::respond 200 content "[X509::cert_fields [SSL::cert 0] 0 subpubkey hash]\n" } else { HTTP::respond 200 content "no client cert (WRONG!)" } } }
Ensure that 'subpubkey' is the last argument to X509::cert_fields
None
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.