Operational Defect Database

BugZero found this defect 1146 days ago.

F5 | 1004953

HTTP does not fall back to HTTP/1.1

Last update date:

5/16/2024

Affected products:

BIG-IP

BIG-IP Install/Upgrade

BIG-IP LTM

Affected releases:

13.1.3.4

13.1.3.5

13.1.3.6

13.1.4

13.1.4.1

13.1.5

13.1.5.1

14.1.4

14.1.4.1

14.1.4.2

14.1.4.3

14.1.4.4

Fixed releases:

No fixed releases provided.

Description:

Severity: 4-Minor ... Symptoms ... After upgrading, the BIG-IP system's HTTP profile no longer falls back to HTTP/1.1 if a client sends a corrupted URI. ... Impact ... The BIG-IP system treats the URI as an HTTP/0.9 request (as per RFC) and forwards only the first request line. ... In previous releases, the BIG-IP system treated the URI as a HTTP/1.1 request. ... Conditions

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Resolved

Learn More

Search:

...