Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-2183
HistorySep 01, 2016 - 12:59 a.m.

CVE-2016-2183

2016-09-0100:59:00
CWE-200
[email protected]
web.nvd.nist.gov
9

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.005

Percentile

77.1%

JSON

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a “Sweet32” attack.

Affected configurations

Nvd
Node
redhatjboss_enterprise_application_platformMatch6.0.0
OR
redhatjboss_enterprise_web_serverMatch1.0.0
OR
redhatjboss_enterprise_web_serverMatch2.0.0
OR
redhatjboss_web_serverMatch3.0
OR
redhatenterprise_linuxMatch5.0
OR
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
Node
pythonpythonRange2.7.0–2.7.13
OR
pythonpythonRange3.4.0–3.4.7
OR
pythonpythonRange3.5.0–3.5.3
Node
ciscocontent_security_management_applianceMatch9.6.6-068
OR
ciscocontent_security_management_applianceMatch9.7.0-006
Node
opensslopensslMatch1.0.1a
OR
opensslopensslMatch1.0.1b
OR
opensslopensslMatch1.0.1c
OR
opensslopensslMatch1.0.1d
OR
opensslopensslMatch1.0.1e
OR
opensslopensslMatch1.0.1f
OR
opensslopensslMatch1.0.1g
OR
opensslopensslMatch1.0.1h
OR
opensslopensslMatch1.0.1i
OR
opensslopensslMatch1.0.1j
OR
opensslopensslMatch1.0.1k
OR
opensslopensslMatch1.0.1l
OR
opensslopensslMatch1.0.1m
OR
opensslopensslMatch1.0.1n
OR
opensslopensslMatch1.0.1o
OR
opensslopensslMatch1.0.1p
OR
opensslopensslMatch1.0.1q
OR
opensslopensslMatch1.0.1r
OR
opensslopensslMatch1.0.1t
OR
opensslopensslMatch1.0.2a
OR
opensslopensslMatch1.0.2b
OR
opensslopensslMatch1.0.2c
OR
opensslopensslMatch1.0.2d
OR
opensslopensslMatch1.0.2e
OR
opensslopensslMatch1.0.2f
OR
opensslopensslMatch1.0.2h
Node
oracledatabaseMatch11.2.0.4
OR
oracledatabaseMatch12.1.0.2
Node
nodejsnode.jsRange0.10.0–0.10.47
OR
nodejsnode.jsRange0.12.0–0.12.16
OR
nodejsnode.jsRange4.0.0–4.1.2-
OR
nodejsnode.jsRange4.2.0–4.6.0lts
OR
nodejsnode.jsRange6.0.0–6.7.0-
VendorProductVersionCPE
redhatjboss_enterprise_application_platform6.0.0cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
redhatjboss_enterprise_web_server1.0.0cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*
redhatjboss_enterprise_web_server2.0.0cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*
redhatjboss_web_server3.0cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*
redhatenterprise_linux5.0cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
redhatenterprise_linux7.0cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
pythonpython*cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
ciscocontent_security_management_appliance9.6.6-068cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:*
ciscocontent_security_management_appliance9.7.0-006cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:*
Rows per page:
1-10 of 411

References

Related

ibm 91
openvas 15
hackerone 7
nessus 33
cve 2
prion 2
checkpoint_advisories 1
alpinelinux 1
attackerkb 1
cloudfoundry 1
redhat 13
cvelist 2
f5 2
oraclelinux 3
ubuntucve 1
osv 2
veracode 2
centos 1
github 1
threatpost 4
openssl 1
fortinet 1
exploitpack 1
zdt 1
nvd 1
symantec 1
packetstorm 1
ubuntu 2
redhatcve 1
hp 1
exploitdb 1
seebug 1
slackware 1
ibm
ibm
Security Bulletin: A vulnerability in Python affects PowerKVM
2018-09-26 17:55:02
Security Bulletin: GSKit Sweet32: Birthday attacks in IBM Content Collector for File Systems
2018-06-17 12:17:39
Security Bulletin: A security vulnerability has been identified in GSKit shipped with IBM Spectrum Scale V4 (CVE-2016-2183)
2018-08-01 19:18:54
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0719-1)
2021-06-09 00:00:00
Python < 2.7.13, 3.4.x < 3.4.7, 3.5.x < 3.5.3 Sweet32 attack (bpo-27850) - Linux
2021-11-01 00:00:00
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2016-1090)
2020-01-23 00:00:00
hackerone
hackerone
Legal Robot: SWEET32 TLS attack
2017-01-18 18:03:52
Yelp: Yelp.com is vulnerable to SWEET32 attack
2017-01-18 17:43:32
Udemy: sweet32
2017-03-31 12:18:22
nessus
nessus
SSL Medium Strength Cipher Suites Supported (SWEET32)
2009-11-23 00:00:00
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2017:0719-1)
2017-03-20 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K13167034)
2017-03-02 00:00:00
cve
cve
CVE-2016-2183
2016-09-01 00:59:00
CVE-2023-0296
2023-01-17 21:15:15
prion
prion
Design/Logic Flaw
2016-09-01 00:59:00
Design/Logic Flaw
2023-01-17 21:15:00
checkpoint_advisories
checkpoint_advisories
Weak SSL 3DES Cipher Suites (CVE-2016-2183)
2016-09-25 00:00:00
alpinelinux
alpinelinux
CVE-2016-2183
2016-09-01 00:59:00
attackerkb
attackerkb
CVE-2016-2183
2016-09-01 00:00:00
cloudfoundry
cloudfoundry
CVE-2016-2183: Birthday attacks against TLS ciphers with 64bit block size | Cloud Foundry
2019-10-24 00:00:00
redhat
redhat
(RHSA-2019:1245) Moderate: Red Hat Quay 3.0.2 security and bug fix update
2019-05-20 14:11:05
(RHSA-2019:2859) Moderate: OpenShift Container Platform 4.1.18 security update
2019-09-27 00:13:12
(RHSA-2017:0462) Moderate: java-1.8.0-ibm security update
2017-03-08 11:18:03
cvelist
cvelist
CVE-2016-2183
2016-09-01 00:00:00
CVE-2023-0296
2023-01-17 00:00:00
f5
f5
SOL13167034 - OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
K13167034 : OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
oraclelinux
oraclelinux
python security update
2018-07-03 00:00:00
python security and bug fix update
2018-11-05 00:00:00
openssl security update
2016-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2016-2183
2016-08-31 00:00:00
osv
osv
CVE-2016-2183
2016-09-01 00:59:00
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
veracode
veracode
Weak Encryption
2019-01-15 09:15:57
Information Disclosure
2017-01-09 02:06:31
centos
centos
python, tkinter security update
2018-07-13 16:28:09
github
github
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
threatpost
threatpost
New Collision Attacks Against 3DES, Blowfish Allow for Cookie Decryption
2016-08-24 08:00:39
OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack
2016-09-23 15:47:13
OpenSSL Fixes Critical Bug Introduced by Latest Update
2016-09-26 10:45:04
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2183
2016-08-24 00:00:00
fortinet
fortinet
Protect
2019-02-07 00:00:00
exploitpack
exploitpack
IBM Informix Dynamic Server Informix Open Admin Tool - DLL Injection Remote Code Execution Heap Buffer Overflow
2017-05-30 00:00:00
zdt
zdt
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
2017-05-31 00:00:00
nvd
nvd
CVE-2023-0296
2023-01-17 21:15:15
symantec
symantec
SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish
2016-12-22 08:00:00
packetstorm
packetstorm
IBM Informix Dynamic Server DLL Injection / Code Execution
2017-05-31 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2017-04-27 00:00:00
NSS vulnerability
2017-07-31 00:00:00
redhatcve
redhatcve
CVE-2023-0296
2023-01-16 14:05:12
hp
hp
Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability
2022-12-05 00:00:00
exploitdb
exploitdb
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow
2017-05-30 00:00:00
seebug
seebug
IBM Informix Dynamic Server Open Admin Tool RCE (CVE-2017-1092)
2017-05-24 00:00:00
slackware
slackware
[slackware-security] python
2016-12-28 21:09:54

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.005

Percentile

77.1%

JSON
Related for NVD:CVE-2016-2183
ibm91openvas15hackerone7nessus33cve2prion2checkpoint_advisories1alpinelinux1attackerkb1cloudfoundry1redhat13cvelist2f52oraclelinux3ubuntucve1osv2veracode2centos1github1threatpost4openssl1fortinet1exploitpack1zdt1nvd1symantec1packetstorm1ubuntu2redhatcve1hp1exploitdb1seebug1slackware1