Ticketbleed
From WikiAlpha
| The below content is licensed according to Creative Commons Attribution-ShareAlike License contrary to the public domain logo at the foot of the page. It originally appeared on http://en.wikipedia.org. The original article might still be accessible here. You may be able to find a list of the article's previous contributors on the talk page. |
Ticketbleed is a software vulnerability in the TLS stack of certain F5 products that allows a remote attacker to extract up to 31 bytes of uninitialized memory at a time, which can contain any kind of random sensitive information, like in Heartbleed.[1]
Ticketbleed is registered in the Common Vulnerabilities and Exposures database as CVE-2016-9244[2]
Cloudflare Cryptography Engineer Filippo Valsorda was credited for responsible disclosure.
References
- ↑ Valsorda, Filippo. "Finding Ticketbleed". https://blog.filippo.io/finding-ticketbleed/.
- ↑ mitre.org. "CVE-2016-9244". mitre.org. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9244. Retrieved 9 February 2017.
| |||||||||||||||||||||||
