Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-2183
HistorySep 01, 2016 - 12:59 a.m.

CVE-2016-2183

2016-09-0100:59:00
CWE-200
[email protected]
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a “Sweet32” attack.

Affected configurations

NVD
Node
redhatjboss_enterprise_application_platformMatch6.0.0
OR
redhatjboss_enterprise_web_serverMatch1.0.0
OR
redhatjboss_enterprise_web_serverMatch2.0.0
OR
redhatjboss_web_serverMatch3.0
OR
redhatenterprise_linuxMatch5.0
OR
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
Node
pythonpythonRange2.7.0–2.7.13
OR
pythonpythonRange3.4.0–3.4.7
OR
pythonpythonRange3.5.0–3.5.3
Node
ciscocontent_security_management_applianceMatch9.6.6-068
OR
ciscocontent_security_management_applianceMatch9.7.0-006
Node
opensslopensslMatch1.0.1a
OR
opensslopensslMatch1.0.1b
OR
opensslopensslMatch1.0.1c
OR
opensslopensslMatch1.0.1d
OR
opensslopensslMatch1.0.1e
OR
opensslopensslMatch1.0.1f
OR
opensslopensslMatch1.0.1g
OR
opensslopensslMatch1.0.1h
OR
opensslopensslMatch1.0.1i
OR
opensslopensslMatch1.0.1j
OR
opensslopensslMatch1.0.1k
OR
opensslopensslMatch1.0.1l
OR
opensslopensslMatch1.0.1m
OR
opensslopensslMatch1.0.1n
OR
opensslopensslMatch1.0.1o
OR
opensslopensslMatch1.0.1p
OR
opensslopensslMatch1.0.1q
OR
opensslopensslMatch1.0.1r
OR
opensslopensslMatch1.0.1t
OR
opensslopensslMatch1.0.2a
OR
opensslopensslMatch1.0.2b
OR
opensslopensslMatch1.0.2c
OR
opensslopensslMatch1.0.2d
OR
opensslopensslMatch1.0.2e
OR
opensslopensslMatch1.0.2f
OR
opensslopensslMatch1.0.2h
Node
oracledatabaseMatch11.2.0.4
OR
oracledatabaseMatch12.1.0.2
Node
nodejsnode.jsRange0.10.0–0.10.47
OR
nodejsnode.jsRange0.12.0–0.12.16
OR
nodejsnode.jsRange4.0.0–4.1.2-
OR
nodejsnode.jsRange4.2.0–4.6.0lts
OR
nodejsnode.jsRange6.0.0–6.7.0-

References

Related

nessus 35
ibm 89
openvas 15
prion 2
hackerone 7
cve 2
f5 2
oraclelinux 3
ubuntucve 1
redhat 12
checkpoint_advisories 1
alpinelinux 1
cloudfoundry 1
attackerkb 1
cvelist 2
openssl 1
osv 2
veracode 2
threatpost 4
github 1
centos 1
fortinet 1
exploitpack 1
hp 1
redhatcve 1
symantec 1
packetstorm 1
ubuntu 2
nvd 1
zdt 1
seebug 1
slackware 1
exploitdb 1
ics 1
nessus
nessus
SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2017:0719-1)
2017-03-20 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K13167034)
2017-03-02 00:00:00
SSL Medium Strength Cipher Suites Supported (SWEET32)
2009-11-23 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability in GSKit affects IBM Rational ClearQuest (CVE-2016-2183)
2020-02-04 16:40:40
Security Bulletin: Vulnerability in OpenSSL affects IBM Fabric Manager (CVE-2016-2183)
2019-01-31 02:25:02
Security Bulletin: GSKit Sweet32: Birthday attacks in IBM Content Collector for File Systems
2018-06-17 12:17:39
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0719-1)
2021-06-09 00:00:00
Python < 2.7.13, 3.4.x < 3.4.7, 3.5.x < 3.5.3 Sweet32 attack (bpo-27850) - Linux
2021-11-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0720-1)
2021-04-19 00:00:00
prion
prion
Design/Logic Flaw
2016-09-01 00:59:00
Design/Logic Flaw
2023-01-17 21:15:00
hackerone
hackerone
Legal Robot: SWEET32 TLS attack
2017-01-18 18:03:52
UPchieve: Vulnerability Report - sweet32 UPchieve
2021-07-21 07:06:38
Nextcloud: Nextcloud.com is vulnerable to SWEET32 attack
2017-01-18 18:23:36
cve
cve
CVE-2016-2183
2016-09-01 00:59:00
CVE-2023-0296
2023-01-17 21:15:15
f5
f5
SOL13167034 - OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
K13167034 : OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
oraclelinux
oraclelinux
python security update
2018-07-03 00:00:00
python security and bug fix update
2018-11-05 00:00:00
openssl security update
2016-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2016-2183
2016-08-31 00:00:00
redhat
redhat
(RHSA-2017:0462) Moderate: java-1.8.0-ibm security update
2017-03-08 11:18:03
(RHSA-2020:3842) Moderate: OpenShift Container Platform 4.5.13 openshift-enterprise-console-container security update
2020-09-30 23:59:28
(RHSA-2019:2859) Moderate: OpenShift Container Platform 4.1.18 security update
2019-09-27 00:13:12
checkpoint_advisories
checkpoint_advisories
Weak SSL 3DES Cipher Suites (CVE-2016-2183)
2016-09-25 00:00:00
alpinelinux
alpinelinux
CVE-2016-2183
2016-09-01 00:59:00
cloudfoundry
cloudfoundry
CVE-2016-2183: Birthday attacks against TLS ciphers with 64bit block size | Cloud Foundry
2019-10-24 00:00:00
attackerkb
attackerkb
CVE-2016-2183
2016-09-01 00:00:00
cvelist
cvelist
CVE-2016-2183
2016-09-01 00:00:00
CVE-2023-0296
2023-01-17 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2183
2016-08-24 00:00:00
osv
osv
CVE-2016-2183
2016-09-01 00:59:00
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
veracode
veracode
Weak Encryption
2019-01-15 09:15:57
Information Disclosure
2017-01-09 02:06:31
threatpost
threatpost
New Collision Attacks Against 3DES, Blowfish Allow for Cookie Decryption
2016-08-24 08:00:39
OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack
2016-09-23 15:47:13
OpenSSL Fixes Critical Bug Introduced by Latest Update
2016-09-26 10:45:04
github
github
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
centos
centos
python, tkinter security update
2018-07-13 16:28:09
fortinet
fortinet
Protect
2019-02-07 00:00:00
exploitpack
exploitpack
IBM Informix Dynamic Server Informix Open Admin Tool - DLL Injection Remote Code Execution Heap Buffer Overflow
2017-05-30 00:00:00
hp
hp
Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability
2022-12-05 00:00:00
redhatcve
redhatcve
CVE-2023-0296
2023-01-16 14:05:12
symantec
symantec
SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish
2016-12-22 08:00:00
packetstorm
packetstorm
IBM Informix Dynamic Server DLL Injection / Code Execution
2017-05-31 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2017-04-27 00:00:00
NSS vulnerability
2017-07-31 00:00:00
nvd
nvd
CVE-2023-0296
2023-01-17 21:15:15
zdt
zdt
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
2017-05-31 00:00:00
seebug
seebug
IBM Informix Dynamic Server Open Admin Tool RCE (CVE-2017-1092)
2017-05-24 00:00:00
slackware
slackware
[slackware-security] python
2016-12-28 21:09:54
exploitdb
exploitdb
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow
2017-05-30 00:00:00
ics
ics
Mitsubishi Electric Air Conditioning Systems
2022-06-20 12:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON
Related for NVD:CVE-2016-2183
nessus35ibm89openvas15prion2hackerone7cve2f52oraclelinux3ubuntucve1redhat12checkpoint_advisories1alpinelinux1cloudfoundry1attackerkb1cvelist2openssl1osv2veracode2threatpost4github1centos1fortinet1exploitpack1hp1redhatcve1symantec1packetstorm1ubuntu2nvd1zdt1seebug1slackware1exploitdb1ics1