CVE-2016-2183 : The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Published 2016-09-01 00:59:00

Updated 2023-02-12 23:17:38

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2016-2183

Cisco » Content Security Management Appliance » Version: 9.7.0-006
cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:*
Matching versions
Cisco » Content Security Management Appliance » Version: 9.6.6-068
cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 5.0
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Web Server » Version: 1.0.0
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Web Server » Version: 2.0.0
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Web Server » Version: 3.0
cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Database » Version: 11.2.0.4
cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*
Matching versions
Oracle » Database » Version: 12.1.0.2
cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1f
cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1c
cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1b
cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1e
cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1d
cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1a
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1g
cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1h
cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1i
cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1j
cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1l
cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1k
cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1m
cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2a
cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2b
cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2c
cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1n
cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1o
cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2d
cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2e
cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1q
cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1p
cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2f
cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1r
cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1t
cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2h
cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.5.0 and before (<) 3.5.3
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 2.7.0 and before (<) 2.7.13
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.4.0 and before (<) 3.4.7
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js »
Versions from including (>=) 4.0.0 and before (<) 4.1.2
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Matching versions
Nodejs » Node.js » LTS Edition
Versions from including (>=) 4.2.0 and before (<) 4.6.0
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.10.0 and before (<) 0.10.47
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js »
Versions from including (>=) 6.0.0 and before (<) 6.7.0
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.12.0 and before (<) 0.12.16
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2016-2183

Top countries where our scanners detected CVE-2016-2183

Top open port discovered on systems with this issue 53

IPs affected by CVE-2016-2183 810,534

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2016-2183!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2016-2183

EPSS FAQ

0.53%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-2183

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2016-2183

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2183

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:3239

RHSA-2017:3239 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21991482

IBM Security Bulletin: OpenSSL and OpenVPN vulnerabilities affect IBM Rational Team Concert (CVE-2016-2183, CVE-2016-6329)
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201612-16

OpenSSL: Multiple vulnerabilities (GLSA 201612-16) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://support.f5.com/csp/article/K13167034

OpenSSL vulnerability CVE-2016-2183
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html

Oracle Critical Patch Update Advisory - January 2020
Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2020.html

Oracle Critical Patch Update Advisory - October 2020
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3194-1

USN-3194-1: OpenJDK 7 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://www.ubuntu.com/usn/USN-3372-1

USN-3372-1: NSS vulnerability | Ubuntu security notices | Ubuntu
Third Party Advisory
https://access.redhat.com/articles/2548661

SWEET32: Birthday attacks against TLS ciphers with 64bit block size (CVE-2016-2183) - Red Hat Customer Portal
Mitigation;Third Party Advisory
https://www.openssl.org/blog/blog/2016/08/24/sweet32/

The SWEET32 Issue, CVE-2016-2183 - OpenSSL Blog
Mitigation;Press/Media Coverage;Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0336.html

RHSA-2017:0336 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

[security-announce] openSUSE-SU-2016:2537-1: important: Security update for compat-openssl098 - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/92630

SSL/TLS Protocol CVE-2016-2183 Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

HPSBMU03668 rev.1 - HPE Systems Insight Manager using OpenSSL, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201701-65

Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201701-65) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1369383

1369383 – (CVE-2016-2183, SWEET32) CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
Issue Tracking;Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0451

RHSA-2020:0451 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415

Document - HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information | HPE Support
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html

Oracle Critical Patch Update Advisory - April 2020
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/539885/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680

Document - HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities | HPE Support
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

Document - HPSBGN03658 rev.1 - HPE IceWall Products using OpenSSL, Local or Remote Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Modification | HPE Support
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

HPSBGN03658 rev.1 - HPE IceWall Products using OpenSSL, Local or Remote Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Modification
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Oracle Critical Patch Update - April 2018
Patch;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/security/cve/cve-2016-2183

CVE-2016-2183 - Red Hat Customer Portal
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Philips Intellispace Portal ISP Vulnerabilities | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url
http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html

IBM Informix Dynamic Server DLL Injection / Code Execution ≈ Packet Storm
Third Party Advisory;VDB Entry
https://security.gentoo.org/glsa/201707-01

IcedTea: Multiple vulnerabilities (GLSA 201707-01) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633

SWEET32 : triple-DES should now be considered as “bad” as RC4. · Issue #387 · ssllabs/ssllabs-scan · GitHub
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3240

RHSA-2017:3240 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.tenable.com/security/tns-2016-20

[R3] PVS 5.2.0 Fixes Multiple Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html

[security-announce] openSUSE-SU-2016:2496-1: important: Security update for nodejs - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujul2020.html

Oracle Critical Patch Update Advisory - July 2020
Third Party Advisory

CVEs referencing this url
https://www.ietf.org/mail-archive/web/tls/current/msg04560.html

Archive
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

[security-announce] SUSE-SU-2016:2458-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html

[security-announce] SUSE-SU-2017:0460-1: important: Security update for java-1_8_0-ibm - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Oracle Critical Patch Update - January 2018
Patch;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Oracle Critical Patch Update - July 2019
Patch;Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415

HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information
Third Party Advisory
https://seclists.org/bugtraq/2018/Nov/21

Bugtraq: [security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of information
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984

HPSBMU03660 rev.1 - HPE System Management Homepage using OpenSSL on Windows and Linux, Remote Disclosure of information
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

[security-announce] SUSE-SU-2016:2394-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:2859

RHSA-2019:2859 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://www.sigsac.org/ccs/CCS2016/accepted-papers/

Accepted papers | ACM CCS 2016
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10215

Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2017/Jul/31

Full Disclosure: Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilities
Mailing List;Third Party Advisory

CVEs referencing this url
https://bto.bluecoat.com/security-advisory/sa133

SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

[security-announce] SUSE-SU-2016:2469-1: important: Security update for openssl1 - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/542005/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://www.tenable.com/security/tns-2016-21

[R2] LCE 4.8.2 Fixes Multiple Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403

Document - HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information | HPE Support
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113

RHSA-2017:3113 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/540341/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1036696

OpenSSL 3DES Cipher Block Collision Weakness Lets Remote Users Decrypt Data in Certain Cases - SecurityTracker
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Oracle VM Server for x86 Bulletin - October 2016
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0462.html

RHSA-2017:0462 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849

Document - HPESBGN03697 rev.3 - HPE Business Service Management (BSM) using OpenSSL, Remote Disclosure of Information | HPE Support
Third Party Advisory
https://sweet32.info/

Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN
Technical Description;Third Party Advisory

CVEs referencing this url
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

Pulse Security Advisory: SA40312 - September 22 2016 OpenSSL Security Advisory
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Oracle Linux Bulletin - October 2016
Third Party Advisory

CVEs referencing this url
https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/

Attack of the week: 64-bit ciphers in TLS – A Few Thoughts on Cryptographic Engineering
Press/Media Coverage;Technical Description;Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1216

RHSA-2017:1216 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10171

McAfee Security Bulletin: Updates fix multiple OpenSSL vulnerabilities (CVE-2016-6304, CVE-2016-2183, CVE-2016-2182, and CVE-2016-7052)
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Oracle Critical Patch Update - October 2017
Patch;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21995039

IBM notice: The page you requested cannot be displayed
Third Party Advisory

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10186

Third Party Advisory
https://www.tenable.com/security/tns-2017-09

[R1] LCE 5.0.1 Fixes Two Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

Security updates for all active release lines, September 2016 | Node.js
Third Party Advisory

CVEs referencing this url
https://www.exploit-db.com/exploits/42091/

IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow
Third Party Advisory;VDB Entry

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10197

McAfee Security Bulletin - Sweet32 vulnerability (CVE-2016-2183)
Third Party Advisory
http://seclists.org/fulldisclosure/2017/May/105

Full Disclosure: SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities
Mailing List;Third Party Advisory
https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/

Anatomy of a cryptographic collision – the “Sweet32” attack – Naked Security
Press/Media Coverage;Technical Description;Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Oracle Critical Patch Update - October 2016
Patch;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

[security-announce] openSUSE-SU-2016:2391-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3673

Debian -- Security Information -- DSA-3673-1 openssl
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/95568

RETIRED: Oracle Java SE CVE-2016-2183 Remote Security Vulnerability
Third Party Advisory;VDB Entry
http://www.ubuntu.com/usn/USN-3198-1

USN-3198-1: OpenJDK 6 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html

[security-announce] openSUSE-SU-2017:0374-1: important: Security update for java-1_8_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

[security-announce] openSUSE-SU-2016:2407-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:2708

RHSA-2017:2708 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.splunk.com/view/SP-CAAAPUE

Splunk Enterprise 6.4.5 addresses multiple vulnerabilities | Splunk
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

[security-announce] SUSE-SU-2017:2700-1: important: Security update for SLES 12-SP1 Docker image - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178

MFSBGN03831 rev. - Service Management Automation, remote disclosure of information
Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

Security Advisory 0024 - Arista
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0337.html

RHSA-2017:0337 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116

HPSBHF03666 rev.1 - HPE Integrated Lights-Out 4 (iLO 4) using OpenSSL, Remote Disclosure of Information
Third Party Advisory
https://www.tenable.com/security/tns-2016-16

[R7] Nessus 6.9 Fixes Multiple Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:2710

RHSA-2017:2710 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:2123

RHSA-2018:2123 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2709

RHSA-2017:2709 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products
Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2021.html

Oracle Critical Patch Update Advisory - October 2021
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html

[security-announce] openSUSE-SU-2017:0513-1: important: Security update for java-1_7_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499

HPSBHF03674 rev.2 - HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information
Third Party Advisory
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/

New Practical Attacks on 64-bit Block Ciphers (3DES, Blowfish)
Press/Media Coverage;Technical Description;Third Party Advisory
http://www.securityfocus.com/archive/1/541104/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://kc.mcafee.com/corporate/index?page=content&id=SB10310

McAfee Security Bulletin - Network Security Manager/Network Security Platform/Network Threat Behavior Analysis update fixes multiple vulnerabilities (CVE-2013-4559, CVE-2015-3200, CVE-2016-2183, CVE-2
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:1245

RHSA-2019:1245 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849

HPESBGN03697 rev.3 - HPE Business Service Management (BSM) using OpenSSL, Remote Disclosure of Information
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

CVEs referencing this url
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008

Mitel Product Security Advisory 17-0008
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

[security-announce] SUSE-SU-2016:2387-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697

IBM Security Bulletin: IBM i is affected by several vulnerabilities (CVE-2016-2183 and CVE-2016-6329)
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722

Document - HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities | HPE Support
Third Party Advisory
https://security.netapp.com/advisory/ntap-20170119-0001/

January 2017 Java Platform Standard Edition Vulnerabilities in Multiple NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.ubuntu.com/usn/USN-3179-1

USN-3179-1: OpenJDK 8 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.splunk.com/view/SP-CAAAPSV

Splunk Enterprise 6.5.1 addresses multiple OpenSSL vulnerabilities | Splunk
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

[security-announce] SUSE-SU-2017:2699-1: important: Security update for SLES 12 Docker image - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613

MFSBGN03805 - HP Service Manager, Remote Disclosure of Information
Third Party Advisory
https://wiki.opendaylight.org/view/Security_Advisories

Security:Advisories - OpenDaylight Project
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403

HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html

[security-announce] SUSE-SU-2017:0490-1: important: Security update for java-1_7_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Juniper Networks - 2016-10 Security Bulletin: OpenSSL security updates
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html

[security-announce] SUSE-SU-2017:1444-1: important: Security update for java-1_6_0-ibm - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilities
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Oracle Critical Patch Update - July 2017
Patch;Third Party Advisory

CVEs referencing this url
https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue

SeaCat Application Security Technology Is Not Impacted by the SWEET32 Issue (CVE-2016-2183) · TeskaLabs Blog
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114

RHSA-2017:3114 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html

[security-announce] SUSE-SU-2016:2470-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3087-2

USN-3087-2: OpenSSL regression | Ubuntu security notices | Ubuntu
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

Mailing List;Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0338.html

RHSA-2017:0338 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20160915-0001/

CVE-2016-2183 TLS Protocol 64-bit Cipher Vulnerability in Multiple NetApp Products | NetApp Product Security
Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-1

USN-3087-1: OpenSSL vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3270-1

USN-3270-1: NSS vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html

[security-announce] SUSE-SU-2017:0346-1: important: Security update for java-1_8_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

[security-announce] openSUSE-SU-2018:0458-1: important: Security update for openssl-steam - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to