CVE-2016-2183

Опубликовано: 01 сент. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Версия от 2.7.0 (включая) до 2.7.13 (исключая)

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.7 (исключая)

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Версия от 3.5.0 (включая) до 3.5.3 (исключая)

Конфигурация 3

Одно из

cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:*

cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*

Версия от 0.10.0 (включая) до 0.10.47 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*

Версия от 0.12.0 (включая) до 0.12.16 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Версия от 4.0.0 (включая) до 4.1.2 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Версия от 4.2.0 (включая) до 4.6.0 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Версия от 6.0.0 (включая) до 6.7.0 (исключая)

EPSS

Процентиль: 97%

0.40603

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-2183

CVSS3: 7.5

ubuntu

почти 9 лет назад

CVE-2016-2183

CVSS3: 7.5

redhat

почти 9 лет назад

CVE-2016-2183

CVSS3: 7.5

debian

почти 9 лет назад

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec pro ...

SUSE-SU-2017:0839-1

suse-cvrf

около 8 лет назад

Security update for java-1_8_0-ibm

SUSE-SU-2017:0726-1

suse-cvrf

больше 8 лет назад

Security update for java-1_6_0-ibm

EPSS

Процентиль: 97%

0.40603

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200