CVE-2016-9244: Infoleak
First published: Thu Feb 09 2017(Updated: )
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Riverbed SteelApp Traffic Manager | =11.4.0 | |
| Riverbed SteelApp Traffic Manager | =11.4.1 | |
| Riverbed SteelApp Traffic Manager | =11.5.0 | |
| Riverbed SteelApp Traffic Manager | =11.5.1 | |
| Riverbed SteelApp Traffic Manager | =11.5.2 | |
| Riverbed SteelApp Traffic Manager | =11.5.3 | |
| Riverbed SteelApp Traffic Manager | =11.5.4 | |
| Riverbed SteelApp Traffic Manager | =11.6.0 | |
| Riverbed SteelApp Traffic Manager | =11.6.1 | |
| Riverbed SteelApp Traffic Manager | =12.0.0 | |
| Riverbed SteelApp Traffic Manager | =12.1.0 | |
| Riverbed SteelApp Traffic Manager | =12.1.1 | |
| Riverbed SteelApp Traffic Manager | =12.1.2 | |
| F5 BIG-IP Application Acceleration Manager | =11.4.0 | |
| F5 BIG-IP Application Acceleration Manager | =11.4.1 | |
| F5 BIG-IP Application Acceleration Manager | =11.5.0 | |
| F5 BIG-IP Application Acceleration Manager | =11.5.1 | |
| F5 BIG-IP Application Acceleration Manager | =11.5.2 | |
| F5 BIG-IP Application Acceleration Manager | =11.5.3 | |
| F5 BIG-IP Application Acceleration Manager | =11.5.4 | |
| F5 BIG-IP Application Acceleration Manager | =11.6.0 | |
| F5 BIG-IP Application Acceleration Manager | =11.6.1 | |
| F5 BIG-IP Application Acceleration Manager | =12.0.0 | |
| F5 BIG-IP Application Acceleration Manager | =12.1.0 | |
| F5 BIG-IP Application Acceleration Manager | =12.1.1 | |
| F5 BIG-IP Application Acceleration Manager | =12.1.2 | |
| F5 BIG-IP Advanced Firewall Manager | =11.4.0 | |
| F5 BIG-IP Advanced Firewall Manager | =11.4.1 | |
| F5 BIG-IP Advanced Firewall Manager | =11.5.0 | |
| F5 BIG-IP Advanced Firewall Manager | =11.5.1 | |
| F5 BIG-IP Advanced Firewall Manager | =11.5.2 | |
| F5 BIG-IP Advanced Firewall Manager | =11.5.3 | |
| F5 BIG-IP Advanced Firewall Manager | =11.5.4 | |
| F5 BIG-IP Advanced Firewall Manager | =11.6.0 | |
| F5 BIG-IP Advanced Firewall Manager | =11.6.1 | |
| F5 BIG-IP Advanced Firewall Manager | =12.0.0 | |
| F5 BIG-IP Advanced Firewall Manager | =12.1.0 | |
| F5 BIG-IP Advanced Firewall Manager | =12.1.1 | |
| F5 BIG-IP Advanced Firewall Manager | =12.1.2 | |
| F5 BIG-IP Analytics | =11.4.0 | |
| F5 BIG-IP Analytics | =11.4.1 | |
| F5 BIG-IP Analytics | =11.5.0 | |
| F5 BIG-IP Analytics | =11.5.1 | |
| F5 BIG-IP Analytics | =11.5.2 | |
| F5 BIG-IP Analytics | =11.5.3 | |
| F5 BIG-IP Analytics | =11.5.4 | |
| F5 BIG-IP Analytics | =11.6.0 | |
| F5 BIG-IP Analytics | =11.6.1 | |
| F5 BIG-IP Analytics | =12.0.0 | |
| F5 BIG-IP Analytics | =12.1.0 | |
| F5 BIG-IP Analytics | =12.1.1 | |
| F5 BIG-IP Analytics | =12.1.2 | |
| F5 Access Policy Manager | =11.4.0 | |
| F5 Access Policy Manager | =11.4.1 | |
| F5 Access Policy Manager | =11.5.0 | |
| F5 Access Policy Manager | =11.5.1 | |
| F5 Access Policy Manager | =11.5.2 | |
| F5 Access Policy Manager | =11.5.3 | |
| F5 Access Policy Manager | =11.5.4 | |
| F5 Access Policy Manager | =11.6.0 | |
| F5 Access Policy Manager | =11.6.1 | |
| F5 Access Policy Manager | =12.0.0 | |
| F5 Access Policy Manager | =12.1.0 | |
| F5 Access Policy Manager | =12.1.1 | |
| F5 Access Policy Manager | =12.1.2 | |
| F5 Application Security Manager | =11.4.0 | |
| F5 Application Security Manager | =11.4.1 | |
| F5 Application Security Manager | =11.5.0 | |
| F5 Application Security Manager | =11.5.1 | |
| F5 Application Security Manager | =11.5.2 | |
| F5 Application Security Manager | =11.5.3 | |
| F5 Application Security Manager | =11.5.4 | |
| F5 Application Security Manager | =11.6.0 | |
| F5 Application Security Manager | =11.6.1 | |
| F5 Application Security Manager | =12.0.0 | |
| F5 Application Security Manager | =12.1.0 | |
| F5 Application Security Manager | =12.1.1 | |
| F5 Application Security Manager | =12.1.2 | |
| Riverbed SteelApp Traffic Manager | =11.4.0 | |
| Riverbed SteelApp Traffic Manager | =11.4.1 | |
| Riverbed SteelApp Traffic Manager | =11.5.0 | |
| Riverbed SteelApp Traffic Manager | =11.5.1 | |
| Riverbed SteelApp Traffic Manager | =11.5.2 | |
| Riverbed SteelApp Traffic Manager | =11.5.3 | |
| Riverbed SteelApp Traffic Manager | =11.5.4 | |
| Riverbed SteelApp Traffic Manager | =11.6.0 | |
| Riverbed SteelApp Traffic Manager | =11.6.1 | |
| F5 BIG-IP Link Controller | =11.4.0 | |
| F5 BIG-IP Link Controller | =11.4.1 | |
| F5 BIG-IP Link Controller | =11.5.0 | |
| F5 BIG-IP Link Controller | =11.5.1 | |
| F5 BIG-IP Link Controller | =11.5.2 | |
| F5 BIG-IP Link Controller | =11.5.3 | |
| F5 BIG-IP Link Controller | =11.5.4 | |
| F5 BIG-IP Link Controller | =11.6.0 | |
| F5 BIG-IP Link Controller | =11.6.1 | |
| F5 BIG-IP Link Controller | =12.0.0 | |
| F5 BIG-IP Link Controller | =12.1.0 | |
| F5 BIG-IP Link Controller | =12.1.1 | |
| F5 BIG-IP Link Controller | =12.1.2 | |
| F5 BIG-IP Policy Enforcement Manager | =11.4.0 | |
| F5 BIG-IP Policy Enforcement Manager | =11.4.1 | |
| F5 BIG-IP Policy Enforcement Manager | =11.5.0 | |
| F5 BIG-IP Policy Enforcement Manager | =11.5.1 | |
| F5 BIG-IP Policy Enforcement Manager | =11.5.2 | |
| F5 BIG-IP Policy Enforcement Manager | =11.5.3 | |
| F5 BIG-IP Policy Enforcement Manager | =11.5.4 | |
| F5 BIG-IP Policy Enforcement Manager | =11.6.0 | |
| F5 BIG-IP Policy Enforcement Manager | =11.6.1 | |
| F5 BIG-IP Policy Enforcement Manager | =12.0.0 | |
| F5 BIG-IP Policy Enforcement Manager | =12.1.0 | |
| F5 BIG-IP Policy Enforcement Manager | =12.1.1 | |
| F5 BIG-IP Policy Enforcement Manager | =12.1.2 | |
| F5 BIG-IP Protocol Security Manager | =11.4.0 | |
| F5 BIG-IP Protocol Security Manager | =11.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
- http://www.securityfocus.com/bid/96143
- http://www.securitytracker.com/id/1037800
- https://blog.filippo.io/finding-ticketbleed/
- https://filippo.io/Ticketbleed/
- https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
- https://support.f5.com/csp/article/K05121675
- https://www.exploit-db.com/exploits/41298/
Frequently Asked Questions
What is the severity of CVE-2016-9244?
CVE-2016-9244 has a medium severity rating due to the potential for information disclosure.
How do I fix CVE-2016-9244?
To fix CVE-2016-9244, upgrade to a patched version of F5 BIG-IP that disables the non-default Session Tickets option.
What systems are affected by CVE-2016-9244?
CVE-2016-9244 affects F5 BIG-IP software versions 11.4.0 through 12.1.2.
What type of vulnerability is CVE-2016-9244?
CVE-2016-9244 is an information disclosure vulnerability that may allow remote attackers to obtain SSL session IDs.
Can CVE-2016-9244 be exploited remotely?
Yes, CVE-2016-9244 can be exploited remotely by attackers to leak session data.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/riverbed steelapp traffic manager
- version/riverbed steelapp traffic manager/11.4.0
- version/riverbed steelapp traffic manager/11.4.1
- version/riverbed steelapp traffic manager/11.5.0
- version/riverbed steelapp traffic manager/11.5.1
- version/riverbed steelapp traffic manager/11.5.2
- version/riverbed steelapp traffic manager/11.5.3
- version/riverbed steelapp traffic manager/11.5.4
- version/riverbed steelapp traffic manager/11.6.0
- version/riverbed steelapp traffic manager/11.6.1
- version/riverbed steelapp traffic manager/12.0.0
- version/riverbed steelapp traffic manager/12.1.0
- version/riverbed steelapp traffic manager/12.1.1
- version/riverbed steelapp traffic manager/12.1.2
- canonical/f5 big-ip application acceleration manager
- version/f5 big-ip application acceleration manager/11.4.0
- version/f5 big-ip application acceleration manager/11.4.1
- version/f5 big-ip application acceleration manager/11.5.0
- version/f5 big-ip application acceleration manager/11.5.1
- version/f5 big-ip application acceleration manager/11.5.2
- version/f5 big-ip application acceleration manager/11.5.3
- version/f5 big-ip application acceleration manager/11.5.4
- version/f5 big-ip application acceleration manager/11.6.0
- version/f5 big-ip application acceleration manager/11.6.1
- version/f5 big-ip application acceleration manager/12.0.0
- version/f5 big-ip application acceleration manager/12.1.0
- version/f5 big-ip application acceleration manager/12.1.1
- version/f5 big-ip application acceleration manager/12.1.2
- canonical/f5 big-ip advanced firewall manager
- version/f5 big-ip advanced firewall manager/11.4.0
- version/f5 big-ip advanced firewall manager/11.4.1
- version/f5 big-ip advanced firewall manager/11.5.0
- version/f5 big-ip advanced firewall manager/11.5.1
- version/f5 big-ip advanced firewall manager/11.5.2
- version/f5 big-ip advanced firewall manager/11.5.3
- version/f5 big-ip advanced firewall manager/11.5.4
- version/f5 big-ip advanced firewall manager/11.6.0
- version/f5 big-ip advanced firewall manager/11.6.1
- version/f5 big-ip advanced firewall manager/12.0.0
- version/f5 big-ip advanced firewall manager/12.1.0
- version/f5 big-ip advanced firewall manager/12.1.1
- version/f5 big-ip advanced firewall manager/12.1.2
- canonical/f5 big-ip analytics
- version/f5 big-ip analytics/11.4.0
- version/f5 big-ip analytics/11.4.1
- version/f5 big-ip analytics/11.5.0
- version/f5 big-ip analytics/11.5.1
- version/f5 big-ip analytics/11.5.2
- version/f5 big-ip analytics/11.5.3
- version/f5 big-ip analytics/11.5.4
- version/f5 big-ip analytics/11.6.0
- version/f5 big-ip analytics/11.6.1
- version/f5 big-ip analytics/12.0.0
- version/f5 big-ip analytics/12.1.0
- version/f5 big-ip analytics/12.1.1
- version/f5 big-ip analytics/12.1.2
- canonical/f5 access policy manager
- version/f5 access policy manager/11.4.0
- version/f5 access policy manager/11.4.1
- version/f5 access policy manager/11.5.0
- version/f5 access policy manager/11.5.1
- version/f5 access policy manager/11.5.2
- version/f5 access policy manager/11.5.3
- version/f5 access policy manager/11.5.4
- version/f5 access policy manager/11.6.0
- version/f5 access policy manager/11.6.1
- version/f5 access policy manager/12.0.0
- version/f5 access policy manager/12.1.0
- version/f5 access policy manager/12.1.1
- version/f5 access policy manager/12.1.2
- canonical/f5 application security manager
- version/f5 application security manager/11.4.0
- version/f5 application security manager/11.4.1
- version/f5 application security manager/11.5.0
- version/f5 application security manager/11.5.1
- version/f5 application security manager/11.5.2
- version/f5 application security manager/11.5.3
- version/f5 application security manager/11.5.4
- version/f5 application security manager/11.6.0
- version/f5 application security manager/11.6.1
- version/f5 application security manager/12.0.0
- version/f5 application security manager/12.1.0
- version/f5 application security manager/12.1.1
- version/f5 application security manager/12.1.2
- canonical/f5 big-ip link controller
- version/f5 big-ip link controller/11.4.0
- version/f5 big-ip link controller/11.4.1
- version/f5 big-ip link controller/11.5.0
- version/f5 big-ip link controller/11.5.1
- version/f5 big-ip link controller/11.5.2
- version/f5 big-ip link controller/11.5.3
- version/f5 big-ip link controller/11.5.4
- version/f5 big-ip link controller/11.6.0
- version/f5 big-ip link controller/11.6.1
- version/f5 big-ip link controller/12.0.0
- version/f5 big-ip link controller/12.1.0
- version/f5 big-ip link controller/12.1.1
- version/f5 big-ip link controller/12.1.2
- canonical/f5 big-ip policy enforcement manager
- version/f5 big-ip policy enforcement manager/11.4.0
- version/f5 big-ip policy enforcement manager/11.4.1
- version/f5 big-ip policy enforcement manager/11.5.0
- version/f5 big-ip policy enforcement manager/11.5.1
- version/f5 big-ip policy enforcement manager/11.5.2
- version/f5 big-ip policy enforcement manager/11.5.3
- version/f5 big-ip policy enforcement manager/11.5.4
- version/f5 big-ip policy enforcement manager/11.6.0
- version/f5 big-ip policy enforcement manager/11.6.1
- version/f5 big-ip policy enforcement manager/12.0.0
- version/f5 big-ip policy enforcement manager/12.1.0
- version/f5 big-ip policy enforcement manager/12.1.1
- version/f5 big-ip policy enforcement manager/12.1.2
- canonical/f5 big-ip protocol security manager
- version/f5 big-ip protocol security manager/11.4.0
- version/f5 big-ip protocol security manager/11.4.1