CVE Feed

Dashboard / CVE / CVE-2016-2183

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Published:Aug 24, 2016

Last Modified:May 29, 2026

EPS:Sep 1, 2016

EPSS Score:0.37753

CVSS Score:7.5

Affected Products

Vendor

Product

Action

Vendor

Cisco

Product

Content Security Management Appliance

Cisco

Content Security Management Appliance

Vendor

Nodejs

Product

Node.js

Nodejs

Node.js

Vendor

Openssl

Product

Openssl

Openssl

Openssl

Vendor

Oracle

Product

Database

Oracle

Database

Vendor

Python

Product

Python

Python

Python

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Jboss Core Services

Redhat

Jboss Core Services

Vendor

Redhat

Product

Jboss Enterprise Application Platform

Redhat

Jboss Enterprise Application Platform

Vendor

Redhat

Product

Jboss Enterprise Web Server

Redhat

Jboss Enterprise Web Server

Vendor

Redhat

Product

Jboss Web Server

Redhat

Jboss Web Server

Vendor

Redhat

Product

Network Satellite

Redhat

Network Satellite

Vendor

Redhat

Product

Openshift

Redhat

Openshift

Vendor

Redhat

Product

Quay

Redhat

Quay

Vendor

Redhat

Product

Rhel Extras

Redhat

Rhel Extras

Exploits

https://github.com/ZakyHermawan/Simple-Sweet32

Common Weakness Enumeration

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-116 Excavation

CAPEC-13 Subverting Environment Variable Values

CAPEC-169 Footprinting

CAPEC-20 Encryption Brute Forcing

CAPEC-22 Exploiting Trust in Client

CAPEC-224 Fingerprinting

CAPEC-285 ICMP Echo Request Ping

CAPEC-287 TCP SYN Scan

CAPEC-290 Enumerate Mail Exchange (MX) Records

CAPEC-291 DNS Zone Transfers

CAPEC-292 Host Discovery

CAPEC-293 Traceroute Route Enumeration

CAPEC-294 ICMP Address Mask Request

CAPEC-295 Timestamp Request

CAPEC-296 ICMP Information Request

CAPEC-297 TCP ACK Ping

CAPEC-298 UDP Ping

CAPEC-299 TCP SYN Ping

CAPEC-300 Port Scanning

CAPEC-301 TCP Connect Scan

CAPEC-302 TCP FIN Scan

CAPEC-303 TCP Xmas Scan

CAPEC-304 TCP Null Scan

CAPEC-305 TCP ACK Scan

CAPEC-306 TCP Window Scan

CAPEC-307 TCP RPC Scan

CAPEC-308 UDP Scan

CAPEC-309 Network Topology Mapping

CAPEC-310 Scanning for Vulnerable Software

CAPEC-312 Active OS Fingerprinting

CAPEC-313 Passive OS Fingerprinting

CAPEC-317 IP ID Sequencing Probe

CAPEC-318 IP 'ID' Echoed Byte-Order Probe

CAPEC-319 IP (DF) 'Don't Fragment Bit' Echoing Probe

CAPEC-320 TCP Timestamp Probe

CAPEC-321 TCP Sequence Number Probe

CAPEC-322 TCP (ISN) Greatest Common Divisor Probe

CAPEC-323 TCP (ISN) Counter Rate Probe

CAPEC-324 TCP (ISN) Sequence Predictability Probe

CAPEC-325 TCP Congestion Control Flag (ECN) Probe

CAPEC-326 TCP Initial Window Size Probe

CAPEC-327 TCP Options Probe

CAPEC-328 TCP 'RST' Flag Checksum Probe

CAPEC-329 ICMP Error Message Quoting Probe

CAPEC-330 ICMP Error Message Echoing Integrity Probe

CAPEC-459 Creating a Rogue Certification Authority Certificate

CAPEC-472 Browser Fingerprinting

CAPEC-473 Signature Spoof

CAPEC-475 Signature Spoofing by Improper Validation

CAPEC-497 File Discovery

CAPEC-508 Shoulder Surfing

CAPEC-573 Process Footprinting

CAPEC-574 Services Footprinting

CAPEC-575 Account Footprinting

CAPEC-576 Group Permission Footprinting

CAPEC-577 Owner Footprinting

CAPEC-59 Session Credential Falsification through Prediction

CAPEC-60 Reusing Session IDs (aka Session Replay)

CAPEC-608 Cryptanalysis of Cellular Encryption

CAPEC-614 Rooting SIM Cards

CAPEC-616 Establish Rogue Location

CAPEC-643 Identify Shared Files/Directories on System

CAPEC-646 Peripheral Footprinting

CAPEC-651 Eavesdropping

CAPEC-79 Using Slashes in Alternate Encoding

CAPEC-97 Cryptanalysis

Related CVEs

CVE-2021-1516 (CVSS 4.3) — A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Man…

CVE-2021-1447 (CVSS 6.7) — A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management A…

CVE-2021-1129 (CVSS 5.3) — A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appl…

CVE-2019-1983 (CVSS 5.3) — A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appl…

CVE-2020-3117 (CVSS 4.7) — A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content…

CVE-2020-3547 (CVSS 4.3) — A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appli…

CVE-2020-3447 (CVSS 5.5) — A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cis…

CVE-2020-3178 (CVSS 6.1) — Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management …

CVE-2020-3164 (CVSS 5.3) — A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA…

CVE-2019-12635 (CVSS 4.3) — A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software coul…

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html

http://rhn.redhat.com/errata/RHSA-2017-0336.html

http://rhn.redhat.com/errata/RHSA-2017-0337.html

http://rhn.redhat.com/errata/RHSA-2017-0338.html

http://rhn.redhat.com/errata/RHSA-2017-0462.html

http://seclists.org/fulldisclosure/2017/Jul/31

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697

http://www-01.ibm.com/support/docview.wss?uid=swg21991482

http://www-01.ibm.com/support/docview.wss?uid=swg21995039

http://www.debian.org/security/2016/dsa-3673

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

http://www.securityfocus.com/archive/1/539885/100/0/threaded

http://www.securityfocus.com/archive/1/540341/100/0/threaded

http://www.securityfocus.com/archive/1/541104/100/0/threaded

http://www.securityfocus.com/archive/1/542005/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded

http://www.securityfocus.com/bid/92630

http://www.securityfocus.com/bid/95568

http://www.securitytracker.com/id/1036696

http://www.splunk.com/view/SP-CAAAPSV

http://www.splunk.com/view/SP-CAAAPUE

http://www.ubuntu.com/usn/USN-3087-1

http://www.ubuntu.com/usn/USN-3087-2

http://www.ubuntu.com/usn/USN-3179-1

http://www.ubuntu.com/usn/USN-3194-1

http://www.ubuntu.com/usn/USN-3198-1

http://www.ubuntu.com/usn/USN-3270-1

http://www.ubuntu.com/usn/USN-3372-1

https://access.redhat.com/articles/2548661

https://access.redhat.com/errata/RHSA-2017:1216

https://access.redhat.com/errata/RHSA-2017:2708

https://access.redhat.com/errata/RHSA-2017:2709

https://access.redhat.com/errata/RHSA-2017:2710

https://access.redhat.com/errata/RHSA-2017:3113

https://access.redhat.com/errata/RHSA-2017:3114

https://access.redhat.com/errata/RHSA-2017:3239

https://access.redhat.com/errata/RHSA-2017:3240

https://access.redhat.com/errata/RHSA-2018:2123

https://access.redhat.com/errata/RHSA-2019:1245

https://access.redhat.com/errata/RHSA-2019:2859

https://access.redhat.com/errata/RHSA-2020:0451

https://access.redhat.com/security/cve/cve-2016-2183

https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/

https://bto.bluecoat.com/security-advisory/sa133

https://bugzilla.redhat.com/show_bug.cgi?id=1369383

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

https://kc.mcafee.com/corporate/index?page=content&id=SB10171

https://kc.mcafee.com/corporate/index?page=content&id=SB10186

https://kc.mcafee.com/corporate/index?page=content&id=SB10197

https://kc.mcafee.com/corporate/index?page=content&id=SB10215

https://kc.mcafee.com/corporate/index?page=content&id=SB10310

https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/

https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

https://seclists.org/bugtraq/2018/Nov/21

https://security.gentoo.org/glsa/201612-16

https://security.gentoo.org/glsa/201701-65

https://security.gentoo.org/glsa/201707-01

https://security.netapp.com/advisory/ntap-20160915-0001/

https://security.netapp.com/advisory/ntap-20170119-0001/

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178

https://support.f5.com/csp/article/K13167034

https://sweet32.info/

https://wiki.opendaylight.org/view/Security_Advisories

https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

https://www.exploit-db.com/exploits/42091/

https://www.ietf.org/mail-archive/web/tls/current/msg04560.html

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008

https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/

https://www.openssl.org/blog/blog/2016/08/24/sweet32/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.oracle.com/security-alerts/cpujan2020.html

https://www.oracle.com/security-alerts/cpujul2020.html

https://www.oracle.com/security-alerts/cpuoct2020.html

https://www.oracle.com/security-alerts/cpuoct2021.html

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

https://www.sigsac.org/ccs/CCS2016/accepted-papers/

https://www.tenable.com/security/tns-2016-16

https://www.tenable.com/security/tns-2016-20

https://www.tenable.com/security/tns-2016-21

https://www.tenable.com/security/tns-2017-09

https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html

http://rhn.redhat.com/errata/RHSA-2017-0336.html

http://rhn.redhat.com/errata/RHSA-2017-0337.html

http://rhn.redhat.com/errata/RHSA-2017-0338.html

http://rhn.redhat.com/errata/RHSA-2017-0462.html

http://seclists.org/fulldisclosure/2017/Jul/31

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://seclists.org/fulldisclosure/2017/May/105

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697

http://www-01.ibm.com/support/docview.wss?uid=swg21991482

http://www-01.ibm.com/support/docview.wss?uid=swg21995039

http://www.debian.org/security/2016/dsa-3673

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

http://www.securityfocus.com/archive/1/539885/100/0/threaded

http://www.securityfocus.com/archive/1/540341/100/0/threaded

http://www.securityfocus.com/archive/1/541104/100/0/threaded

http://www.securityfocus.com/archive/1/542005/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded

http://www.securityfocus.com/bid/92630

http://www.securityfocus.com/bid/95568

http://www.securitytracker.com/id/1036696

http://www.splunk.com/view/SP-CAAAPSV

http://www.splunk.com/view/SP-CAAAPUE

http://www.ubuntu.com/usn/USN-3087-1

http://www.ubuntu.com/usn/USN-3087-2

http://www.ubuntu.com/usn/USN-3179-1

http://www.ubuntu.com/usn/USN-3194-1

http://www.ubuntu.com/usn/USN-3198-1

http://www.ubuntu.com/usn/USN-3270-1

http://www.ubuntu.com/usn/USN-3372-1

https://access.redhat.com/articles/2548661

https://access.redhat.com/errata/RHSA-2017:1216

https://access.redhat.com/errata/RHSA-2017:2708

https://access.redhat.com/errata/RHSA-2017:2709

https://access.redhat.com/errata/RHSA-2017:2710

https://access.redhat.com/errata/RHSA-2017:3113

https://access.redhat.com/errata/RHSA-2017:3114

https://access.redhat.com/errata/RHSA-2017:3239

https://access.redhat.com/errata/RHSA-2017:3240

https://access.redhat.com/errata/RHSA-2018:2123

https://access.redhat.com/errata/RHSA-2019:1245

https://access.redhat.com/errata/RHSA-2019:2859

https://access.redhat.com/errata/RHSA-2020:0451

https://access.redhat.com/security/cve/cve-2016-2183

https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/

https://bto.bluecoat.com/security-advisory/sa133

https://bugzilla.redhat.com/show_bug.cgi?id=1369383

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

https://kc.mcafee.com/corporate/index?page=content&id=SB10171

https://kc.mcafee.com/corporate/index?page=content&id=SB10186

https://kc.mcafee.com/corporate/index?page=content&id=SB10197

https://kc.mcafee.com/corporate/index?page=content&id=SB10215

https://kc.mcafee.com/corporate/index?page=content&id=SB10310

https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/

https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

https://seclists.org/bugtraq/2018/Nov/21

https://security.gentoo.org/glsa/201612-16

https://security.gentoo.org/glsa/201701-65

https://security.gentoo.org/glsa/201707-01

https://security.netapp.com/advisory/ntap-20160915-0001/

https://security.netapp.com/advisory/ntap-20170119-0001/

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178

https://support.f5.com/csp/article/K13167034

https://sweet32.info/

https://wiki.opendaylight.org/view/Security_Advisories

https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

https://www.exploit-db.com/exploits/42091/

https://www.ietf.org/mail-archive/web/tls/current/msg04560.html

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008

https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/

https://www.openssl.org/blog/blog/2016/08/24/sweet32/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.oracle.com/security-alerts/cpujan2020.html

https://www.oracle.com/security-alerts/cpujul2020.html

https://www.oracle.com/security-alerts/cpuoct2020.html

https://www.oracle.com/security-alerts/cpuoct2021.html

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

https://www.sigsac.org/ccs/CCS2016/accepted-papers/

https://www.tenable.com/security/tns-2016-16

https://www.tenable.com/security/tns-2016-20

https://www.tenable.com/security/tns-2016-21

https://www.tenable.com/security/tns-2017-09

https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue

https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability

https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High