CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9244

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.726

EPSS Ranking 98.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2016-9244

F5 » Big-Ip Access Policy Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0
F5 » Big-Ip Access Policy Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1
F5 » Big-Ip Access Policy Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0
F5 » Big-Ip Access Policy Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1
F5 » Big-Ip Access Policy Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2
F5 » Big-Ip Access Policy Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3
F5 » Big-Ip Access Policy Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4
F5 » Big-Ip Access Policy Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0
F5 » Big-Ip Access Policy Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1
F5 » Big-Ip Access Policy Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0
F5 » Big-Ip Access Policy Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0
F5 » Big-Ip Access Policy Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1
F5 » Big-Ip Access Policy Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1
F5 » Big-Ip Advanced Firewall Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2
F5 » Big-Ip Analytics » Version: 11.4.0

cpe:2.3:a:f5:big-ip_analytics:11.4.0
F5 » Big-Ip Analytics » Version: 11.4.1

cpe:2.3:a:f5:big-ip_analytics:11.4.1
F5 » Big-Ip Analytics » Version: 11.5.0

cpe:2.3:a:f5:big-ip_analytics:11.5.0
F5 » Big-Ip Analytics » Version: 11.5.1

cpe:2.3:a:f5:big-ip_analytics:11.5.1
F5 » Big-Ip Analytics » Version: 11.5.2

cpe:2.3:a:f5:big-ip_analytics:11.5.2
F5 » Big-Ip Analytics » Version: 11.5.3

cpe:2.3:a:f5:big-ip_analytics:11.5.3
F5 » Big-Ip Analytics » Version: 11.5.4

cpe:2.3:a:f5:big-ip_analytics:11.5.4
F5 » Big-Ip Analytics » Version: 11.6.0

cpe:2.3:a:f5:big-ip_analytics:11.6.0
F5 » Big-Ip Analytics » Version: 11.6.1

cpe:2.3:a:f5:big-ip_analytics:11.6.1
F5 » Big-Ip Analytics » Version: 12.0.0

cpe:2.3:a:f5:big-ip_analytics:12.0.0
F5 » Big-Ip Analytics » Version: 12.1.0

cpe:2.3:a:f5:big-ip_analytics:12.1.0
F5 » Big-Ip Analytics » Version: 12.1.1

cpe:2.3:a:f5:big-ip_analytics:12.1.1
F5 » Big-Ip Analytics » Version: 12.1.2

cpe:2.3:a:f5:big-ip_analytics:12.1.2
F5 » Big-Ip Application Acceleration Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4
F5 » Big-Ip Application Acceleration Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1
F5 » Big-Ip Application Acceleration Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0
F5 » Big-Ip Application Acceleration Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0
F5 » Big-Ip Application Acceleration Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1
F5 » Big-Ip Application Acceleration Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2
F5 » Big-Ip Application Security Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0
F5 » Big-Ip Application Security Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1
F5 » Big-Ip Application Security Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0
F5 » Big-Ip Application Security Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1
F5 » Big-Ip Application Security Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2
F5 » Big-Ip Application Security Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
F5 » Big-Ip Application Security Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4
F5 » Big-Ip Application Security Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0
F5 » Big-Ip Application Security Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1
F5 » Big-Ip Application Security Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0
F5 » Big-Ip Application Security Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0
F5 » Big-Ip Application Security Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1
F5 » Big-Ip Application Security Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2
F5 » Big-Ip Global Traffic Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0
F5 » Big-Ip Global Traffic Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1
F5 » Big-Ip Global Traffic Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0
F5 » Big-Ip Global Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1
F5 » Big-Ip Global Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2
F5 » Big-Ip Global Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3
F5 » Big-Ip Global Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4
F5 » Big-Ip Global Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0
F5 » Big-Ip Global Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1
F5 » Big-Ip Link Controller » Version: 11.4.0

cpe:2.3:a:f5:big-ip_link_controller:11.4.0
F5 » Big-Ip Link Controller » Version: 11.4.1

cpe:2.3:a:f5:big-ip_link_controller:11.4.1
F5 » Big-Ip Link Controller » Version: 11.5.0

cpe:2.3:a:f5:big-ip_link_controller:11.5.0
F5 » Big-Ip Link Controller » Version: 11.5.1

cpe:2.3:a:f5:big-ip_link_controller:11.5.1
F5 » Big-Ip Link Controller » Version: 11.5.2

cpe:2.3:a:f5:big-ip_link_controller:11.5.2
F5 » Big-Ip Link Controller » Version: 11.5.3

cpe:2.3:a:f5:big-ip_link_controller:11.5.3
F5 » Big-Ip Link Controller » Version: 11.5.4

cpe:2.3:a:f5:big-ip_link_controller:11.5.4
F5 » Big-Ip Link Controller » Version: 11.6.0

cpe:2.3:a:f5:big-ip_link_controller:11.6.0
F5 » Big-Ip Link Controller » Version: 11.6.1

cpe:2.3:a:f5:big-ip_link_controller:11.6.1
F5 » Big-Ip Link Controller » Version: 12.0.0

cpe:2.3:a:f5:big-ip_link_controller:12.0.0
F5 » Big-Ip Link Controller » Version: 12.1.0

cpe:2.3:a:f5:big-ip_link_controller:12.1.0
F5 » Big-Ip Link Controller » Version: 12.1.1

cpe:2.3:a:f5:big-ip_link_controller:12.1.1
F5 » Big-Ip Link Controller » Version: 12.1.2

cpe:2.3:a:f5:big-ip_link_controller:12.1.2
F5 » Big-Ip Local Traffic Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0
F5 » Big-Ip Local Traffic Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1
F5 » Big-Ip Local Traffic Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0
F5 » Big-Ip Local Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1
F5 » Big-Ip Local Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2
F5 » Big-Ip Local Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3
F5 » Big-Ip Local Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4
F5 » Big-Ip Local Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0
F5 » Big-Ip Local Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1
F5 » Big-Ip Local Traffic Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0
F5 » Big-Ip Local Traffic Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0
F5 » Big-Ip Local Traffic Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1
F5 » Big-Ip Local Traffic Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2
F5 » Big-Ip Policy Enforcement Manager » Version: 11.4.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.4.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1
F5 » Big-Ip Policy Enforcement Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0
F5 » Big-Ip Policy Enforcement Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0
F5 » Big-Ip Policy Enforcement Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1
F5 » Big-Ip Policy Enforcement Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2
F5 » Big-Ip Protocol Security Module » Version: 11.4.0

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0
F5 » Big-Ip Protocol Security Module » Version: 11.4.1

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9244

Products

Pricing

Contact Us