CVE-2016-9244

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.

Affected

F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

74.00% chance of exploitation in the next 30 days, 99th percentile

Published

2017-02-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• EgeBalci/Ticketbleed30★ · 2017-02-20

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/44446
• https://www.exploit-db.com/exploits/41298

Security advisories

• https://support.f5.com/csp/article/K05121675
• http://www.securitytracker.com/id/1037800
• http://www.securityfocus.com/bid/96143

References

• CVE Record
• NVD entry

Related

• CVE-2018-16946
• CVE-2018-8065
• CVE-2022-29154