CVE-2016-2183

Published: Sep 1, 2016Modified: May 29, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Affected (45)

Products: Redhat: Enterprise Linux, Jboss Enterprise Application Platform, Jboss Enterprise Web Server, Jboss Web Server · Python: Python · Cisco: Content Security Management Appliance · +3 more

Show all products

Redhat: Enterprise Linux, Jboss Enterprise Application Platform, Jboss Enterprise Web Server, Jboss Web Server · Python: Python · Cisco: Content Security Management Appliance · Openssl: Openssl · Oracle: Database · Nodejs: Node.js

Redhat

4 products

Enterprise Linux

Jboss Enterprise Application Platform

Jboss Enterprise Web Server

1 product

1 product

Content Security Management Appliance

1 product

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Jboss Enterprise Application Platform	Version 6.0.0
Redhat Jboss Enterprise Web Server	Version 1.0.0
Redhat Jboss Enterprise Web Server	Version 2.0.0
Redhat Jboss Web Server	Version 3.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Python Python	From 2.7.0 to 2.7.13
Python Python	From 3.4.0 to 3.4.7
Python Python	From 3.5.0 to 3.5.3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Content Security Management Appliance	Version 9.6.6-068
Cisco Content Security Management Appliance	Version 9.7.0-006

Configuration D

26 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 1.0.1a
Openssl Openssl	Version 1.0.1b
Openssl Openssl	Version 1.0.1c
Openssl Openssl	Version 1.0.1d
Openssl Openssl	Version 1.0.1e
Openssl Openssl	Version 1.0.1f
Openssl Openssl	Version 1.0.1g
Openssl Openssl	Version 1.0.1h
Openssl Openssl	Version 1.0.1i
Openssl Openssl	Version 1.0.1j
Openssl Openssl	Version 1.0.1k
Openssl Openssl	Version 1.0.1l
Openssl Openssl	Version 1.0.1m
Openssl Openssl	Version 1.0.1n
Openssl Openssl	Version 1.0.1o
Openssl Openssl	Version 1.0.1p
Openssl Openssl	Version 1.0.1q
Openssl Openssl	Version 1.0.1r
Openssl Openssl	Version 1.0.1t
Openssl Openssl	Version 1.0.2a
Openssl Openssl	Version 1.0.2b
Openssl Openssl	Version 1.0.2c
Openssl Openssl	Version 1.0.2d
Openssl Openssl	Version 1.0.2e
Openssl Openssl	Version 1.0.2f
Openssl Openssl	Version 1.0.2h

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database	Version 11.2.0.4
Oracle Database	Version 12.1.0.2

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Nodejs Node.js	From 0.10.0 to 0.10.47
Nodejs Node.js	From 0.12.0 to 0.12.16
Nodejs Node.js	From 4.0.0 to 4.1.2
Nodejs Node.js	From 6.0.0 to 6.7.0
Nodejs Node.js	From 4.2.0 to 4.6.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (278)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2017-0336.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0337.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0338.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0462.html

Source: secalert@redhat.com

Third Party Advisory

http://seclists.org/fulldisclosure/2017/Jul/31

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2017/May/105

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2017/May/105

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2017/May/105

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2017/May/105

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21991482

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21995039

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3673

Source: secalert@redhat.com

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/539885/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540341/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/541104/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/542005/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/92630

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/95568

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036696

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.splunk.com/view/SP-CAAAPSV

Source: secalert@redhat.com

Third Party Advisory

http://www.splunk.com/view/SP-CAAAPUE

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3087-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3087-2

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3179-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3194-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3198-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3270-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3372-1

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/articles/2548661

Source: secalert@redhat.com

MitigationThird Party Advisory

https://access.redhat.com/errata/RHSA-2017:1216

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2708

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2709

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2710

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3113

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3114

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3239

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3240

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2123

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1245

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2859

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0451

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/cve/cve-2016-2183

Source: secalert@redhat.com

Third Party Advisory

https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/

Source: secalert@redhat.com

Press/Media CoverageTechnical DescriptionThird Party Advisory

https://bto.bluecoat.com/security-advisory/sa133

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1369383

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Source: secalert@redhat.com

https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849

Source: secalert@redhat.com

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10171

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10186

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10197

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10215

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10310

Source: secalert@redhat.com

Third Party Advisory

https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/

Source: secalert@redhat.com

Press/Media CoverageTechnical DescriptionThird Party Advisory

https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

Source: secalert@redhat.com

Third Party Advisory

https://seclists.org/bugtraq/2018/Nov/21

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201612-16

Source: secalert@redhat.com

Third Party Advisory

https://security.gentoo.org/glsa/201701-65

Source: secalert@redhat.com

Third Party Advisory

https://security.gentoo.org/glsa/201707-01

Source: secalert@redhat.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160915-0001/

Source: secalert@redhat.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20170119-0001/

Source: secalert@redhat.com

Third Party Advisory

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613

Source: secalert@redhat.com

Third Party Advisory

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178

Source: secalert@redhat.com

Third Party Advisory

https://support.f5.com/csp/article/K13167034

Source: secalert@redhat.com

Third Party Advisory

https://sweet32.info/

Source: secalert@redhat.com

Technical DescriptionThird Party Advisory

https://wiki.opendaylight.org/view/Security_Advisories

Source: secalert@redhat.com

Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/42091/

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://www.ietf.org/mail-archive/web/tls/current/msg04560.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008

Source: secalert@redhat.com

Third Party Advisory

https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/

Source: secalert@redhat.com

Press/Media CoverageTechnical DescriptionThird Party Advisory

https://www.openssl.org/blog/blog/2016/08/24/sweet32/

Source: secalert@redhat.com

MitigationPress/Media CoverageThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Source: secalert@redhat.com

PatchThird Party Advisory

https://www.sigsac.org/ccs/CCS2016/accepted-papers/

Source: secalert@redhat.com

Third Party Advisory

https://www.tenable.com/security/tns-2016-16

Source: secalert@redhat.com

Third Party Advisory

https://www.tenable.com/security/tns-2016-20

Source: secalert@redhat.com

Third Party Advisory

https://www.tenable.com/security/tns-2016-21

Source: secalert@redhat.com

Third Party Advisory

https://www.tenable.com/security/tns-2017-09

Source: secalert@redhat.com

Third Party Advisory

https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue

Source: secalert@redhat.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759