58 matches found
CVE-2023-54356
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...
CVE-2023-54356 Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...
EUVD-2023-60611
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites TLSECDHERSAWITH3DESEDECBCSHA and TLSRSAWITH3DESEDECBCSHA on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack CVE-2016-2183, which, over very long-lived TLS connections carrying large volumes...
Simple-Sweet32
Sweet32 This is a demonstration of the Sweet32 attack CVE-2016-2183: https://sweet32.info/ The attack is an example of a birthday attack which exploits crypto algorithms with small block sizes 64-bit in CBC mode, such as 3DES and Blowfish. The attack requires generation of a lot of encrypted bloc...
EUVD-2016-7256
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2016-6329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to the Sweet32 attack.
Summary The 3DES cipher was available in some TLS cipher suites. Vulnerability Details CVEID:CVE-2016-2183 DESCRIPTION: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which...
Siemens SCALANCE X-200RNA Switch Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-2183)
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
Linux Distros Unpatched Vulnerability : CVE-2016-2183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billi...
Weak Cryptography
github.com/kyverno/kyverno is vulnerable to Weak Cryptography. The vulnerability exits due the use of insecure ciphers such as TLSECDHERSAWITH3DESEDECBCSHA secp256r1 and TLSRSAWITH3DESEDECBCSHA rsa 2048, which are known to be vulnerable to the Sweet32 attack...
K30315990: OpenVPN vulnerability CVE-2016-6329
Security Advisory Description OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attac...
SUSE CVE-2016-2183
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
SUSE CVE-2016-6329
OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...
Mageia: Security Advisory (MGASA-2016-0338)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Python < 2.7.13, 3.4.x < 3.4.7, 3.5.x < 3.5.3 Sweet32 attack (bpo-27850) - Linux
Python is prone to a SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:2838-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sweet32 Attack
OpenVPN is vulnerable to Sweet32 Attack. When using a 64-bit block cipher, it is easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...
PT-2020-13308 · Ericsson +1 · Erlang/Otp +1
Name of the Vulnerable Software and Affected Versions: Yaws versions 2.0.2 through 2.0.7 Description: The issue concerns the loading of obsolete TLS ciphers in Yaws, which can be exploited for Sweet32 attacks. This occurs when Yaws is running on an Erlang/OTP virtual machine with a version less...
The vulnerability of OpenVPN software is related to issues with encryption using a 64-bit block. This allows a hacker to restore the original message.
The vulnerability of the OpenVPN software is related to issues with encryption when using a 64-bit block cipher. Exploiting this vulnerability allows a malicious actor to restore the original message through a “Sweet32” attack...