{"id":"CVE-2016-9244","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-9244","generatedAt":"2026-10-28T20:05:52.422Z","title":"A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory.","description":"A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.","published":"2017-02-09T15:59:01.000Z","lastModified":"2026-06-17T00:55:43.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip protocol security module"],"epss":{"score":0.74,"percentile":0.9948,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.62534,"percentile":0.99179},{"date":"2026-09-22","score":0.74,"percentile":0.9946}]},"kev":{"listed":false},"exploits":{"count":2,"verified":false,"firstPublished":"2017-02-10","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44446,"kind":"exploit","title":"F5 BIG-IP 11.6 SSL Virtual Server - 'Ticketbleed' Memory Disclosure","url":"https://www.exploit-db.com/exploits/44446","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/44446.py","file":"exploits/hardware/remote/44446.py","published":"2017-02-14","added":"2018-04-12","updated":"2018-04-12","author":"@0x00string","type":"remote","platform":"hardware","port":null,"verified":false,"codes":["CVE-2016-9244"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/0x00string/oldays/blob/bf7cf4127dba1aa9a0315a716ea778b66969f694/CVE-2016-9244.py"},{"edbId":41298,"kind":"exploit","title":"F5 BIG-IP SSL Virtual Server - 'Ticketbleed' Memory Disclosure","url":"https://www.exploit-db.com/exploits/41298","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/41298.txt","file":"exploits/hardware/remote/41298.txt","published":"2017-02-10","added":"2017-02-10","updated":"2018-04-12","author":"Ege Balci","type":"remote","platform":"hardware","port":null,"verified":false,"codes":["CVE-2016-9244"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 74.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-22T00:00:00.000Z","detail":{"to":0.74,"from":0.62534,"percentile":0.9946},"summary":"EPSS moved from 62.5% to 74.0% probability of exploitation in the next thirty days."}],"references":[{"url":"http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html","source":"f5sirt@f5.com"},{"url":"http://www.securityfocus.com/bid/96143","source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1037800","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"https://blog.filippo.io/finding-ticketbleed/","source":"f5sirt@f5.com"},{"url":"https://filippo.io/Ticketbleed/","source":"f5sirt@f5.com"},{"url":"https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py","source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K05121675","tags":["Mitigation","Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"https://www.exploit-db.com/exploits/41298/","source":"f5sirt@f5.com"},{"url":"http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/96143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037800","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.filippo.io/finding-ticketbleed/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://filippo.io/Ticketbleed/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K05121675","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/41298/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9244","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}