Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2016-9244
PUBLISHED
More InfoOfficial Page
Assigner-f5
Assigner Org ID-9dacffd4-cb11-413f-8451-fbbfd4ddc0ab
View Known Exploited Vulnerability (KEV) details
Published At-09 Feb, 2017 | 15:00
Updated At-06 Aug, 2024 | 02:42
Rejected At-
▼CVE Numbering Authority (CNA)

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.

Affected Products
Vendor
F5, Inc.F5 Networks
Product
F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM
Versions
Affected
  • 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2
Problem Types
TypeCWE IDDescription
textN/ATLS Session Ticket uninitialized memory leak
Type: text
CWE ID: N/A
Description: TLS Session Ticket uninitialized memory leak
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.f5.com/csp/article/K05121675
x_refsource_CONFIRM
https://www.exploit-db.com/exploits/41298/
exploit
x_refsource_EXPLOIT-DB
https://filippo.io/Ticketbleed/
x_refsource_MISC
http://www.securityfocus.com/bid/96143
vdb-entry
x_refsource_BID
https://blog.filippo.io/finding-ticketbleed/
x_refsource_MISC
http://www.securitytracker.com/id/1037800
vdb-entry
x_refsource_SECTRACK
http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
x_refsource_MISC
https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
x_refsource_MISC
Hyperlink: https://support.f5.com/csp/article/K05121675
Resource:
x_refsource_CONFIRM
Hyperlink: https://www.exploit-db.com/exploits/41298/
Resource:
exploit
x_refsource_EXPLOIT-DB
Hyperlink: https://filippo.io/Ticketbleed/
Resource:
x_refsource_MISC
Hyperlink: http://www.securityfocus.com/bid/96143
Resource:
vdb-entry
x_refsource_BID
Hyperlink: https://blog.filippo.io/finding-ticketbleed/
Resource:
x_refsource_MISC
Hyperlink: http://www.securitytracker.com/id/1037800
Resource:
vdb-entry
x_refsource_SECTRACK
Hyperlink: http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
Resource:
x_refsource_MISC
Hyperlink: https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.f5.com/csp/article/K05121675
x_refsource_CONFIRM
x_transferred
https://www.exploit-db.com/exploits/41298/
exploit
x_refsource_EXPLOIT-DB
x_transferred
https://filippo.io/Ticketbleed/
x_refsource_MISC
x_transferred
http://www.securityfocus.com/bid/96143
vdb-entry
x_refsource_BID
x_transferred
https://blog.filippo.io/finding-ticketbleed/
x_refsource_MISC
x_transferred
http://www.securitytracker.com/id/1037800
vdb-entry
x_refsource_SECTRACK
x_transferred
http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
x_refsource_MISC
x_transferred
https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
x_refsource_MISC
x_transferred
Hyperlink: https://support.f5.com/csp/article/K05121675
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://www.exploit-db.com/exploits/41298/
Resource:
exploit
x_refsource_EXPLOIT-DB
x_transferred
Hyperlink: https://filippo.io/Ticketbleed/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.securityfocus.com/bid/96143
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: https://blog.filippo.io/finding-ticketbleed/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://www.securitytracker.com/id/1037800
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
Resource:
x_refsource_MISC
x_transferred
Details not found