CVE-2016-9244
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 74.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 74.00% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- f5/big-ip local traffic manager · f5/big-ip application acceleration manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip access policy manager · f5/big-ip application security manager · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip policy enforcement manager · f5/big-ip protocol security module
- Source
- f5sirt@f5.com
References
- http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
- http://www.securityfocus.com/bid/96143
- http://www.securitytracker.com/id/1037800Third Party Advisory, VDB Entry
- https://blog.filippo.io/finding-ticketbleed/
- https://filippo.io/Ticketbleed/
- https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
- https://support.f5.com/csp/article/K05121675Mitigation, Vendor Advisory
- https://www.exploit-db.com/exploits/41298/
- http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
- http://www.securityfocus.com/bid/96143
- http://www.securitytracker.com/id/1037800Third Party Advisory, VDB Entry
- https://blog.filippo.io/finding-ticketbleed/
- https://filippo.io/Ticketbleed/
- https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
- https://support.f5.com/csp/article/K05121675Mitigation, Vendor Advisory
- https://www.exploit-db.com/exploits/41298/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.