Lucene search
HistoryFeb 09, 2017 - 3:59 p.m.
CVE-2016-9244
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.957 High
EPSS
Percentile
99.4%
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.
Affected configurations
Node
f5big-ip_local_traffic_managerMatch11.4.0
ORf5big-ip_local_traffic_managerMatch11.4.1
ORf5big-ip_local_traffic_managerMatch11.5.0
ORf5big-ip_local_traffic_managerMatch11.5.1
ORf5big-ip_local_traffic_managerMatch11.5.2
ORf5big-ip_local_traffic_managerMatch11.5.3
ORf5big-ip_local_traffic_managerMatch11.5.4
ORf5big-ip_local_traffic_managerMatch11.6.0
ORf5big-ip_local_traffic_managerMatch11.6.1
ORf5big-ip_local_traffic_managerMatch12.0.0
ORf5big-ip_local_traffic_managerMatch12.1.0
ORf5big-ip_local_traffic_managerMatch12.1.1
ORf5big-ip_local_traffic_managerMatch12.1.2
Node
f5big-ip_application_acceleration_managerMatch11.4.0
ORf5big-ip_application_acceleration_managerMatch11.4.1
ORf5big-ip_application_acceleration_managerMatch11.5.0
ORf5big-ip_application_acceleration_managerMatch11.5.1
ORf5big-ip_application_acceleration_managerMatch11.5.2
ORf5big-ip_application_acceleration_managerMatch11.5.3
ORf5big-ip_application_acceleration_managerMatch11.5.4
ORf5big-ip_application_acceleration_managerMatch11.6.0
ORf5big-ip_application_acceleration_managerMatch11.6.1
ORf5big-ip_application_acceleration_managerMatch12.0.0
ORf5big-ip_application_acceleration_managerMatch12.1.0
ORf5big-ip_application_acceleration_managerMatch12.1.1
ORf5big-ip_application_acceleration_managerMatch12.1.2
Node
f5big-ip_advanced_firewall_managerMatch11.4.0
ORf5big-ip_advanced_firewall_managerMatch11.4.1
ORf5big-ip_advanced_firewall_managerMatch11.5.0
ORf5big-ip_advanced_firewall_managerMatch11.5.1
ORf5big-ip_advanced_firewall_managerMatch11.5.2
ORf5big-ip_advanced_firewall_managerMatch11.5.3
ORf5big-ip_advanced_firewall_managerMatch11.5.4
ORf5big-ip_advanced_firewall_managerMatch11.6.0
ORf5big-ip_advanced_firewall_managerMatch11.6.1
ORf5big-ip_advanced_firewall_managerMatch12.0.0
ORf5big-ip_advanced_firewall_managerMatch12.1.0
ORf5big-ip_advanced_firewall_managerMatch12.1.1
ORf5big-ip_advanced_firewall_managerMatch12.1.2
Node
f5big-ip_analyticsMatch11.4.0
ORf5big-ip_analyticsMatch11.4.1
ORf5big-ip_analyticsMatch11.5.0
ORf5big-ip_analyticsMatch11.5.1
ORf5big-ip_analyticsMatch11.5.2
ORf5big-ip_analyticsMatch11.5.3
ORf5big-ip_analyticsMatch11.5.4
ORf5big-ip_analyticsMatch11.6.0
ORf5big-ip_analyticsMatch11.6.1
ORf5big-ip_analyticsMatch12.0.0
ORf5big-ip_analyticsMatch12.1.0
ORf5big-ip_analyticsMatch12.1.1
ORf5big-ip_analyticsMatch12.1.2
Node
f5big-ip_access_policy_managerMatch11.4.0
ORf5big-ip_access_policy_managerMatch11.4.1
ORf5big-ip_access_policy_managerMatch11.5.0
ORf5big-ip_access_policy_managerMatch11.5.1
ORf5big-ip_access_policy_managerMatch11.5.2
ORf5big-ip_access_policy_managerMatch11.5.3
ORf5big-ip_access_policy_managerMatch11.5.4
ORf5big-ip_access_policy_managerMatch11.6.0
ORf5big-ip_access_policy_managerMatch11.6.1
ORf5big-ip_access_policy_managerMatch12.0.0
ORf5big-ip_access_policy_managerMatch12.1.0
ORf5big-ip_access_policy_managerMatch12.1.1
ORf5big-ip_access_policy_managerMatch12.1.2
Node
f5big-ip_application_security_managerMatch11.4.0
ORf5big-ip_application_security_managerMatch11.4.1
ORf5big-ip_application_security_managerMatch11.5.0
ORf5big-ip_application_security_managerMatch11.5.1
ORf5big-ip_application_security_managerMatch11.5.2
ORf5big-ip_application_security_managerMatch11.5.3
ORf5big-ip_application_security_managerMatch11.5.4
ORf5big-ip_application_security_managerMatch11.6.0
ORf5big-ip_application_security_managerMatch11.6.1
ORf5big-ip_application_security_managerMatch12.0.0
ORf5big-ip_application_security_managerMatch12.1.0
ORf5big-ip_application_security_managerMatch12.1.1
ORf5big-ip_application_security_managerMatch12.1.2
Node
f5big-ip_global_traffic_managerMatch11.4.0
ORf5big-ip_global_traffic_managerMatch11.4.1
ORf5big-ip_global_traffic_managerMatch11.5.0
ORf5big-ip_global_traffic_managerMatch11.5.1
ORf5big-ip_global_traffic_managerMatch11.5.2
ORf5big-ip_global_traffic_managerMatch11.5.3
ORf5big-ip_global_traffic_managerMatch11.5.4
ORf5big-ip_global_traffic_managerMatch11.6.0
ORf5big-ip_global_traffic_managerMatch11.6.1
Node
f5big-ip_link_controllerMatch11.4.0
ORf5big-ip_link_controllerMatch11.4.1
ORf5big-ip_link_controllerMatch11.5.0
ORf5big-ip_link_controllerMatch11.5.1
ORf5big-ip_link_controllerMatch11.5.2
ORf5big-ip_link_controllerMatch11.5.3
ORf5big-ip_link_controllerMatch11.5.4
ORf5big-ip_link_controllerMatch11.6.0
ORf5big-ip_link_controllerMatch11.6.1
ORf5big-ip_link_controllerMatch12.0.0
ORf5big-ip_link_controllerMatch12.1.0
ORf5big-ip_link_controllerMatch12.1.1
ORf5big-ip_link_controllerMatch12.1.2
Node
f5big-ip_policy_enforcement_managerMatch11.4.0
ORf5big-ip_policy_enforcement_managerMatch11.4.1
ORf5big-ip_policy_enforcement_managerMatch11.5.0
ORf5big-ip_policy_enforcement_managerMatch11.5.1
ORf5big-ip_policy_enforcement_managerMatch11.5.2
ORf5big-ip_policy_enforcement_managerMatch11.5.3
ORf5big-ip_policy_enforcement_managerMatch11.5.4
ORf5big-ip_policy_enforcement_managerMatch11.6.0
ORf5big-ip_policy_enforcement_managerMatch11.6.1
ORf5big-ip_policy_enforcement_managerMatch12.0.0
ORf5big-ip_policy_enforcement_managerMatch12.1.0
ORf5big-ip_policy_enforcement_managerMatch12.1.1
ORf5big-ip_policy_enforcement_managerMatch12.1.2
Node
f5big-ip_protocol_security_moduleMatch11.4.0
ORf5big-ip_protocol_security_moduleMatch11.4.1
References
packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
www.securityfocus.com/bid/96143
www.securitytracker.com/id/1037800
blog.filippo.io/finding-ticketbleed/
filippo.io/Ticketbleed/
github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
support.f5.com/csp/article/K05121675
www.exploit-db.com/exploits/41298/
Related
seebug
seebug
F5 TLS vulnerability (CVE-2016-9244)
(Ticketbleed)
2017-02-10 00:00:00
cve
cve
CVE-2016-9244
2017-02-09 15:59:01
nessus
nessus
filippoio
filippoio
Finding Ticketbleed
2017-02-09 02:14:44
Finding Ticketbleed
2017-02-09 02:14:44
prion
prion
Design/Logic Flaw
2017-02-09 15:59:00
cvelist
cvelist
CVE-2016-9244
2017-02-09 15:00:00
exploitpack
exploitpack
F5 BIG-IP 11.6 SSL Virtual Server - Ticketbleed Memory Disclosure
2017-02-14 00:00:00
F5 BIG-IP SSL Virtual Server - Ticketbleed Memory Disclosure
2017-02-10 00:00:00
f5
f5
K05121675 : F5 TLS vulnerability CVE-2016-9244
2017-02-09 00:00:00
openvas
openvas
F5 BIG-IP - F5 TLS vulnerability CVE-2016-9244
2017-02-09 00:00:00
F5 BIG-IP - TMM SSO plugin vulnerability CVE-2016-7467
2017-03-27 00:00:00
F5 BIG-IP - MCPD vulnerability CVE-2016-7474
2017-03-27 00:00:00
checkpoint_advisories
checkpoint_advisories
F5 Big-IP TLS Information Disclosure (Ticketbleed; CVE-2016-9244)
2017-02-16 00:00:00
zdt
zdt
F5 BIG-IP 11.6 SSL Virtual Server - Ticketbleed Memory Disclosure Exploit
2018-04-12 00:00:00
exploitdb
exploitdb
F5 BIG-IP SSL Virtual Server - 'Ticketbleed' Memory Disclosure
2017-02-10 00:00:00
nmap
nmap
tls-ticketbleed NSE Script
2017-02-09 21:30:14
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.957 High
EPSS
Percentile
99.4%
Related for NVD:CVE-2016-9244