CVE-2016-9244

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.

• CWE-200

• http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
• http://www.securityfocus.com/bid/96143
• http://www.securitytracker.com/id/1037800Third Party Advisory, VDB Entry
• https://blog.filippo.io/finding-ticketbleed/
• https://filippo.io/Ticketbleed/
• https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
• https://support.f5.com/csp/article/K05121675Mitigation, Vendor Advisory
• https://www.exploit-db.com/exploits/41298/
• http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html
• http://www.securityfocus.com/bid/96143
• http://www.securitytracker.com/id/1037800Third Party Advisory, VDB Entry
• https://blog.filippo.io/finding-ticketbleed/
• https://filippo.io/Ticketbleed/
• https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
• https://support.f5.com/csp/article/K05121675Mitigation, Vendor Advisory
• https://www.exploit-db.com/exploits/41298/

Published

Feb 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9238Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9239Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9240Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9241Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9242Multiple SQL injection vulnerabilities in the update method …
• CVE-2016-9243HKDF in cryptography before 1.5.2 returns an empty byte-stri…7.5
• CVE-2016-9245In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests mad…
• CVE-2016-9246Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9247Under certain conditions for BIG-IP systems using a virtual …
• CVE-2016-9248Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9249An undisclosed traffic pattern received by a BIG-IP Virtual …
• CVE-2016-9250In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 throu…