CVE-2016-9249

High

Published: 31/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).

Risk Assessment

An attacker could exploit this vulnerability to disrupt service availability, potentially leading to downtime for the organization.

Recommendation

It is recommended to monitor traffic patterns and consider disabling TCP Fast Open to mitigate the risk of this vulnerability.

Other vulnerabilities in BIG-IP Virtual Server

CVE-2016-9244High
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions.

Original NVD description (English source)

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).