EUVD-2016-7256

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

OpenVPN with 64-bit block cipher exposes cleartext data via birthday attack in long sessions.

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: IBM Cisco Switches and Directors vulnerable to Sweet32 Birthday attacks (CVE-2016-2183 CVE-2016-6329).	11 Apr 202215:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to the Sweet32 attack.	3 Jun 202513:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in 64-bit block ciphers affects IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed (CVE-2016-2183, CVE-2016-6329)	26 Apr 202121:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM b-type Network/Storage switches are affected by Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN (openssl ,redhat,openVPN) vulnerabilities.	1 Oct 201821:25	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL and OpenVPN vulnerabilities affect IBM Rational Team Concert (CVE-2016-2183, CVE-2016-6329)	17 Jun 201805:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by several vulnerabilities (CVE-2016-2183 and CVE-2016-6329)	4 Oct 202413:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Sterling Connect:Express for Unix	24 Jul 202022:49	–	ibm
Amazon	Medium: openvpn	27 Sep 201600:00	–	amazon
Tenable Nessus	Amazon Linux AMI : openvpn (ALAS-2016-750) (SWEET32)	28 Sep 201600:00	–	nessus
Tenable Nessus	Fedora 24 : openvpn (2016-7810e24465) (SWEET32)	29 Aug 201600:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "ce42be8a-4865-3c6c-bc5b-aadbcdcd4306",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "690cf948-1bb8-37da-8f25-bd8259a665d1",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2016-6329.html
ubuntu	www.ubuntu.com/security/CVE-2016-6329
advisories	www.advisories.mageia.org/CVE-2016-6329.html
alas	www.alas.aws.amazon.com/cve/html/CVE-2016-6329.html
sweet32	www.sweet32.info/
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
securitytracker	www.securitytracker.com/id/1036695
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
security	www.security.gentoo.org/glsa/201611-02

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 35.9

CVSS 24.3

EPSS0.05509