Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-2183 Details

Description

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	CVE	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html	CVE	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html	CVE	Mailing ListThird Party Advisory
http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html	CVE	Third Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2017-0336.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0337.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0338.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0462.html	CVE	Third Party Advisory
https://access.redhat.com/articles/2548661	CVE	MitigationThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:1216	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2708	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2709	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2710	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3239	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3240	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2123	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1245	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2859	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0451	CVE	Third Party Advisory
https://access.redhat.com/security/cve/cve-2016-2183	CVE	Third Party Advisory
https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/	CVE	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://bto.bluecoat.com/security-advisory/sa133	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1369383	CVE	Issue TrackingThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	CVE
http://seclists.org/fulldisclosure/2017/Jul/31	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2017/May/105	CVE	Mailing ListThird Party Advisory
https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849	CVE	Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	CVE	Third Party AdvisoryUS Government Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10171	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10186	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10197	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10215	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10310	CVE	Third Party Advisory
https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/	CVE	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/	CVE	Third Party Advisory
https://seclists.org/bugtraq/2018/Nov/21	CVE	Mailing ListThird Party Advisory
https://security.gentoo.org/glsa/201612-16	CVE	Third Party Advisory
https://security.gentoo.org/glsa/201701-65	CVE	Third Party Advisory
https://security.gentoo.org/glsa/201707-01	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20160915-0001/	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20170119-0001/	CVE	Third Party Advisory
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613	CVE	Third Party Advisory
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178	CVE	Third Party Advisory
https://support.f5.com/csp/article/K13167034	CVE	Third Party Advisory
https://sweet32.info/	CVE	Technical DescriptionThird Party Advisory
https://wiki.opendaylight.org/view/Security_Advisories	CVE	Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24	CVE	Third Party Advisory
https://www.exploit-db.com/exploits/42091/	CVE	Third Party AdvisoryVDB Entry
https://www.ietf.org/mail-archive/web/tls/current/msg04560.html	CVE	Mailing ListThird Party Advisory
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	CVE	Third Party Advisory
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/	CVE	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://www.openssl.org/blog/blog/2016/08/24/sweet32/	CVE	MitigationPress/Media CoverageThird Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	CVE	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	CVE	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	CVE	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	CVE	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	CVE	Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	CVE	PatchThird Party Advisory
https://www.sigsac.org/ccs/CCS2016/accepted-papers/	CVE	Third Party Advisory
https://www.tenable.com/security/tns-2016-16	CVE	Third Party Advisory
https://www.tenable.com/security/tns-2016-20	CVE	Third Party Advisory
https://www.tenable.com/security/tns-2016-21	CVE	Third Party Advisory
https://www.tenable.com/security/tns-2017-09	CVE	Third Party Advisory
https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue	CVE	Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability	CVE
https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability	CVE
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21991482	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21995039	CVE	Third Party Advisory
http://www.debian.org/security/2016/dsa-3673	CVE	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en	CVE	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html	CVE	Third Party Advisory
http://www.securityfocus.com/archive/1/539885/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/540341/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/541104/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/542005/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/92630	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/95568	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036696	CVE	Third Party AdvisoryVDB Entry
http://www.splunk.com/view/SP-CAAAPSV	CVE	Third Party Advisory
http://www.splunk.com/view/SP-CAAAPUE	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-2	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3179-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3194-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3198-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3270-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-3372-1	CVE	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	[email protected]	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html	[email protected]	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html	[email protected]	Mailing ListThird Party Advisory
http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html	[email protected]	Third Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2017-0336.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0337.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0338.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0462.html	[email protected]	Third Party Advisory
https://access.redhat.com/articles/2548661	[email protected]	MitigationThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:1216	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2708	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2709	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2710	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3239	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3240	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2123	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1245	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2859	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0451	[email protected]	Third Party Advisory
https://access.redhat.com/security/cve/cve-2016-2183	[email protected]	Third Party Advisory
https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/	[email protected]	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://bto.bluecoat.com/security-advisory/sa133	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1369383	[email protected]	Issue TrackingThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	[email protected]
http://seclists.org/fulldisclosure/2017/Jul/31	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2017/May/105	[email protected]	Mailing ListThird Party Advisory
https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849	[email protected]	Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	[email protected]	Third Party AdvisoryUS Government Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10171	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10186	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10197	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10215	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10310	[email protected]	Third Party Advisory
https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/	[email protected]	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/	[email protected]	Third Party Advisory
https://seclists.org/bugtraq/2018/Nov/21	[email protected]	Mailing ListThird Party Advisory
https://security.gentoo.org/glsa/201612-16	[email protected]	Third Party Advisory
https://security.gentoo.org/glsa/201701-65	[email protected]	Third Party Advisory
https://security.gentoo.org/glsa/201707-01	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20160915-0001/	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20170119-0001/	[email protected]	Third Party Advisory
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613	[email protected]	Third Party Advisory
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178	[email protected]	Third Party Advisory
https://support.f5.com/csp/article/K13167034	[email protected]	Third Party Advisory
https://sweet32.info/	[email protected]	Technical DescriptionThird Party Advisory
https://wiki.opendaylight.org/view/Security_Advisories	[email protected]	Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24	[email protected]	Third Party Advisory
https://www.exploit-db.com/exploits/42091/	[email protected]	Third Party AdvisoryVDB Entry
https://www.ietf.org/mail-archive/web/tls/current/msg04560.html	[email protected]	Mailing ListThird Party Advisory
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	[email protected]	Third Party Advisory
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/	[email protected]	Press/Media CoverageTechnical DescriptionThird Party Advisory
https://www.openssl.org/blog/blog/2016/08/24/sweet32/	[email protected]	MitigationPress/Media CoverageThird Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	[email protected]	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	[email protected]	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	[email protected]	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	[email protected]	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	[email protected]	Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	[email protected]	PatchThird Party Advisory
https://www.sigsac.org/ccs/CCS2016/accepted-papers/	[email protected]	Third Party Advisory
https://www.tenable.com/security/tns-2016-16	[email protected]	Third Party Advisory
https://www.tenable.com/security/tns-2016-20	[email protected]	Third Party Advisory
https://www.tenable.com/security/tns-2016-21	[email protected]	Third Party Advisory
https://www.tenable.com/security/tns-2017-09	[email protected]	Third Party Advisory
https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21991482	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21995039	[email protected]	Third Party Advisory
http://www.debian.org/security/2016/dsa-3673	[email protected]	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/archive/1/539885/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/540341/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/541104/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/542005/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/92630	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/95568	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036696	[email protected]	Third Party AdvisoryVDB Entry
http://www.splunk.com/view/SP-CAAAPSV	[email protected]	Third Party Advisory
http://www.splunk.com/view/SP-CAAAPUE	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-2	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3179-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3194-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3198-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3270-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-3372-1	[email protected]	Third Party Advisory

see all 272 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	CISA-ADP

Affected Products

Product	Versions
redhat jboss enterprise application platform	6.0.0
CPE cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:::::::* Remediation No remediation found in references.
redhat jboss enterprise web server	1.0.0 2.0.0
CPE cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:::::::* cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:::::::* Remediation No remediation found in references.
redhat jboss web server	3.0
CPE cpe:2.3:a:redhat:jboss_web_server:3.0:::::::* Remediation No remediation found in references.
redhat enterprise linux	5.0 6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux:7.0:::::::* Remediation No remediation found in references.
python python	>= 2.7.0, < 2.7.13 >= 3.4.0, < 3.4.7 >= 3.5.0, < 3.5.3
CPE cpe:2.3:a:python:python:::::::: Remediation No remediation found in references.
cisco content security management appliance	9.6.6-068 9.7.0-006
CPE cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:::::::* cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:::::::* Remediation No remediation found in references.
openssl openssl	1.0.1a 1.0.1b 1.0.1c 1.0.1d 1.0.1e
CPE cpe:2.3:a:openssl:openssl:1.0.1a:::::::* cpe:2.3:a:openssl:openssl:1.0.1b:::::::* cpe:2.3:a:openssl:openssl:1.0.1c:::::::* cpe:2.3:a:openssl:openssl:1.0.1d:::::::* cpe:2.3:a:openssl:openssl:1.0.1e:::::::* cpe:2.3:a:openssl:openssl:1.0.1f:::::::* cpe:2.3:a:openssl:openssl:1.0.1g:::::::* cpe:2.3:a:openssl:openssl:1.0.1h:::::::* cpe:2.3:a:openssl:openssl:1.0.1i:::::::* cpe:2.3:a:openssl:openssl:1.0.1j:::::::* cpe:2.3:a:openssl:openssl:1.0.1k:::::::* cpe:2.3:a:openssl:openssl:1.0.1l:::::::* cpe:2.3:a:openssl:openssl:1.0.1m:::::::* cpe:2.3:a:openssl:openssl:1.0.1n:::::::* cpe:2.3:a:openssl:openssl:1.0.1o:::::::* cpe:2.3:a:openssl:openssl:1.0.1p:::::::* cpe:2.3:a:openssl:openssl:1.0.1q:::::::* cpe:2.3:a:openssl:openssl:1.0.1r:::::::* cpe:2.3:a:openssl:openssl:1.0.1t:::::::* cpe:2.3:a:openssl:openssl:1.0.2a:::::::* cpe:2.3:a:openssl:openssl:1.0.2b:::::::* cpe:2.3:a:openssl:openssl:1.0.2c:::::::* cpe:2.3:a:openssl:openssl:1.0.2d:::::::* cpe:2.3:a:openssl:openssl:1.0.2e:::::::* cpe:2.3:a:openssl:openssl:1.0.2f:::::::* cpe:2.3:a:openssl:openssl:1.0.2h:::::::* Remediation No remediation found in references.
oracle database	11.2.0.4 12.1.0.2
CPE cpe:2.3:a:oracle:database:11.2.0.4:::::::* cpe:2.3:a:oracle:database:12.1.0.2:::::::* Remediation No remediation found in references.
nodejs node.js	>= 0.10.0, < 0.10.47 >= 0.12.0, < 0.12.16 >= 4.0.0, < 4.1.2 >= 4.2.0, < 4.6.0 >= 6.0.0, < 6.7.0
CPE cpe:2.3:a:nodejs:node.js:::::::: cpe:2.3:a:nodejs:node.js:::::-:::* cpe:2.3:a:nodejs:node.js:::::lts:::* Remediation No remediation found in references.

Change History

70 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
May 29, 2026	CVE Modified	CISA-ADP
May 6, 2026	Status Change	[email protected]
Mar 31, 2025	CVE Modified	CVE
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 12, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Dec 13, 2022	CVE Modified	[email protected]
Aug 16, 2022	Reanalysis	[email protected]
Jul 28, 2022	Modified Analysis	[email protected]
Nov 17, 2021	CVE Modified	[email protected]
Nov 10, 2021	CVE Modified	[email protected]
Nov 8, 2021	CVE Modified	[email protected]
Oct 20, 2021	CVE Modified	[email protected]
Jan 6, 2021	CPE Deprecation Remap	[email protected]
Jan 6, 2021	CPE Deprecation Remap	[email protected]
Oct 20, 2020	CVE Modified	[email protected]
Jul 15, 2020	CVE Modified	[email protected]
Apr 15, 2020	CVE Modified	[email protected]
Mar 18, 2020	CVE Modified	[email protected]
Feb 19, 2020	CVE Modified	[email protected]
Jan 15, 2020	CVE Modified	[email protected]
Oct 25, 2019	CPE Deprecation Remap	[email protected]
Sep 27, 2019	CVE Modified	[email protected]
Jul 23, 2019	CVE Modified	[email protected]
May 20, 2019	CVE Modified	[email protected]
Apr 22, 2019	CPE Deprecation Remap	[email protected]
Oct 23, 2018	CVE Modified	[email protected]
Jul 5, 2018	CVE Modified	[email protected]
Apr 20, 2018	CVE Modified	[email protected]
Mar 28, 2018	CVE Modified	[email protected]
Feb 21, 2018	Modified Analysis	[email protected]
Jan 18, 2018	CVE Modified	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Dec 9, 2017	CVE Modified	[email protected]
Dec 2, 2017	CVE Modified	[email protected]
Nov 10, 2017	CVE Modified	[email protected]
Nov 3, 2017	CVE Modified	[email protected]
Oct 20, 2017	CVE Modified	[email protected]
Aug 16, 2017	CVE Modified	[email protected]
Aug 12, 2017	CVE Modified	[email protected]
Aug 9, 2017	CVE Modified	[email protected]
Jul 7, 2017	CVE Modified	[email protected]
May 10, 2017	CVE Modified	[email protected]
May 9, 2017	CVE Modified	[email protected]
Feb 17, 2017	CVE Modified	[email protected]
Feb 11, 2017	CVE Modified	[email protected]
Feb 8, 2017	Modified Analysis	[email protected]
Feb 8, 2017	CVE Modified	[email protected]
Feb 2, 2017	CVE Modified	[email protected]
Jan 20, 2017	CVE Modified	[email protected]
Jan 19, 2017	CVE Modified	[email protected]
Jan 18, 2017	CVE Modified	[email protected]
Dec 28, 2016	CVE Modified	[email protected]
Dec 24, 2016	CVE Modified	[email protected]
Dec 20, 2016	CVE Modified	[email protected]
Dec 9, 2016	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Nov 4, 2016	CVE Modified	[email protected]
Oct 27, 2016	CVE Modified	[email protected]
Oct 26, 2016	CVE Modified	[email protected]
Oct 25, 2016	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Oct 12, 2016	CVE Modified	[email protected]
Sep 14, 2016	Modified Analysis	[email protected]
Sep 14, 2016	Modified Analysis	[email protected]
Sep 1, 2016	Modified Analysis	[email protected]
Sep 1, 2016	Initial Analysis	[email protected]

CVE-2016-2183 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO