In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_advanced_web_application_firewall | F5 | 14.1.0 (including) | 14.1.2.8 (excluding) |
| Big-ip_advanced_web_application_firewall | F5 | 15.1.0 (excluding) | 15.1.1 (excluding) |
| Big-ip_advanced_web_application_firewall | F5 | 16.0.0 (including) | 16.0.1 (excluding) |
| Big-ip_fraud_protection_service | F5 | 14.1.0 (including) | 14.1.2.8 (excluding) |
| Big-ip_fraud_protection_service | F5 | 15.1.0 (including) | 15.1.1 (excluding) |
| Big-ip_fraud_protection_service | F5 | 16.0.0 (including) | 16.0.1 (excluding) |