Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 3 min 155 bronnen 2 kritiek 46 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-9244

HIGH · 7.5 CVSS Gepubliceerd: CWE-200

Beschrijving

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.

Vendors

F5

Affected products

Big-ip Local Traffic Manager Big-ip Application Acceleration Manager Big-ip Advanced Firewall Manager Big-ip Analytics Big-ip Access Policy Manager Big-ip Application Security Manager Big-ip Global Traffic Manager Big-ip Link Controller Big-ip Policy Enforcement Manager Big-ip Protocol Security Module

References