CVE-2016-2183 : The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a bi

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Published 2016-09-01 00:59:00

Updated 2023-02-12 23:17:38

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Threat overview for CVE-2016-2183

Top countries where our scanners detected CVE-2016-2183

Top open port discovered on systems with this issue 53

IPs affected by CVE-2016-2183 805,912

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2016-2183!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2016-2183

Probability of exploitation activity in the next 30 days: 0.53%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2016-2183

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2016-2183

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2183

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:3239

RHSA-2017:3239 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21991482

IBM Security Bulletin: OpenSSL and OpenVPN vulnerabilities affect IBM Rational Team Concert (CVE-2016-2183, CVE-2016-6329)
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201612-16

OpenSSL: Multiple vulnerabilities (GLSA 201612-16) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://support.f5.com/csp/article/K13167034

OpenSSL vulnerability CVE-2016-2183
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html

Oracle Critical Patch Update Advisory - January 2020
Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2020.html

Oracle Critical Patch Update Advisory - October 2020
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3194-1

USN-3194-1: OpenJDK 7 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://www.ubuntu.com/usn/USN-3372-1

USN-3372-1: NSS vulnerability | Ubuntu security notices | Ubuntu
Third Party Advisory
https://access.redhat.com/articles/2548661

SWEET32: Birthday attacks against TLS ciphers with 64bit block size (CVE-2016-2183) - Red Hat Customer Portal
Mitigation;Third Party Advisory
https://www.openssl.org/blog/blog/2016/08/24/sweet32/

The SWEET32 Issue, CVE-2016-2183 - OpenSSL Blog
Mitigation;Press/Media Coverage;Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0336.html

RHSA-2017:0336 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

[security-announce] openSUSE-SU-2016:2537-1: important: Security update for compat-openssl098 - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/92630

SSL/TLS Protocol CVE-2016-2183 Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

HPSBMU03668 rev.1 - HPE Systems Insight Manager using OpenSSL, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201701-65

Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201701-65) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1369383

1369383 – (CVE-2016-2183, SWEET32) CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
Issue Tracking;Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0451

RHSA-2020:0451 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415

Document - HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information | HPE Support
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html

Oracle Critical Patch Update Advisory - April 2020
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/539885/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680

Document - HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities | HPE Support
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

Document - HPSBGN03658 rev.1 - HPE IceWall Products using OpenSSL, Local or Remote Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Modification | HPE Support
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

HPSBGN03658 rev.1 - HPE IceWall Products using OpenSSL, Local or Remote Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Modification
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Oracle Critical Patch Update - April 2018
Patch;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/security/cve/cve-2016-2183

CVE-2016-2183 - Red Hat Customer Portal
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

Philips Intellispace Portal ISP Vulnerabilities | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url
http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html

IBM Informix Dynamic Server DLL Injection / Code Execution ≈ Packet Storm
Third Party Advisory;VDB Entry
https://security.gentoo.org/glsa/201707-01

IcedTea: Multiple vulnerabilities (GLSA 201707-01) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633

SWEET32 : triple-DES should now be considered as “bad” as RC4. · Issue #387 · ssllabs/ssllabs-scan · GitHub
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3240

RHSA-2017:3240 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.tenable.com/security/tns-2016-20

[R3] PVS 5.2.0 Fixes Multiple Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html

[security-announce] openSUSE-SU-2016:2496-1: important: Security update for nodejs - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujul2020.html

Oracle Critical Patch Update Advisory - July 2020
Third Party Advisory

CVEs referencing this url
https://www.ietf.org/mail-archive/web/tls/current/msg04560.html

Archive
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

[security-announce] SUSE-SU-2016:2458-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html

[security-announce] SUSE-SU-2017:0460-1: important: Security update for java-1_8_0-ibm - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Oracle Critical Patch Update - January 2018
Patch;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Oracle Critical Patch Update - July 2019
Patch;Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415

HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information
Third Party Advisory
https://seclists.org/bugtraq/2018/Nov/21

Bugtraq: [security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of information
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984

HPSBMU03660 rev.1 - HPE System Management Homepage using OpenSSL on Windows and Linux, Remote Disclosure of information
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

[security-announce] SUSE-SU-2016:2394-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:2859

RHSA-2019:2859 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://www.sigsac.org/ccs/CCS2016/accepted-papers/

Accepted papers | ACM CCS 2016
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10215

Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2017/Jul/31

Full Disclosure: Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilities
Mailing List;Third Party Advisory

CVEs referencing this url
https://bto.bluecoat.com/security-advisory/sa133

SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

[security-announce] SUSE-SU-2016:2469-1: important: Security update for openssl1 - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/542005/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://www.tenable.com/security/tns-2016-21

[R2] LCE 4.8.2 Fixes Multiple Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403

Document - HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information | HPE Support
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113

RHSA-2017:3113 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/540341/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1036696

OpenSSL 3DES Cipher Block Collision Weakness Lets Remote Users Decrypt Data in Certain Cases - SecurityTracker
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Oracle VM Server for x86 Bulletin - October 2016
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0462.html

RHSA-2017:0462 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849

Document - HPESBGN03697 rev.3 - HPE Business Service Management (BSM) using OpenSSL, Remote Disclosure of Information | HPE Support
Third Party Advisory
https://sweet32.info/

Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN
Technical Description;Third Party Advisory

CVEs referencing this url
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

Pulse Security Advisory: SA40312 - September 22 2016 OpenSSL Security Advisory
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Oracle Linux Bulletin - October 2016
Third Party Advisory

CVEs referencing this url
https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/

Attack of the week: 64-bit ciphers in TLS – A Few Thoughts on Cryptographic Engineering
Press/Media Coverage;Technical Description;Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1216

RHSA-2017:1216 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10171

McAfee Security Bulletin: Updates fix multiple OpenSSL vulnerabilities (CVE-2016-6304, CVE-2016-2183, CVE-2016-2182, and CVE-2016-7052)
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Oracle Critical Patch Update - October 2017
Patch;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21995039

IBM notice: The page you requested cannot be displayed
Third Party Advisory

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10186

Third Party Advisory
https://www.tenable.com/security/tns-2017-09

[R1] LCE 5.0.1 Fixes Two Third-party Library Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

Security updates for all active release lines, September 2016 | Node.js
Third Party Advisory

CVEs referencing this url
https://www.exploit-db.com/exploits/42091/

IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow
Third Party Advisory;VDB Entry

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10197

McAfee Security Bulletin - Sweet32 vulnerability (CVE-2016-2183)
Third Party Advisory
http://seclists.org/fulldisclosure/2017/May/105

Full Disclosure: SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities
Mailing List;Third Party Advisory
https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/

Anatomy of a cryptographic collision – the “Sweet32” attack – Naked Security
Press/Media Coverage;Technical Description;Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Oracle Critical Patch Update - October 2016
Patch;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

[security-announce] openSUSE-SU-2016:2391-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3673

Debian -- Security Information -- DSA-3673-1 openssl
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/95568

RETIRED: Oracle Java SE CVE-2016-2183 Remote Security Vulnerability
Third Party Advisory;VDB Entry
http://www.ubuntu.com/usn/USN-3198-1

USN-3198-1: OpenJDK 6 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html

[security-announce] openSUSE-SU-2017:0374-1: important: Security update for java-1_8_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

[security-announce] openSUSE-SU-2016:2407-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:2708

RHSA-2017:2708 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.splunk.com/view/SP-CAAAPUE

Splunk Enterprise 6.4.5 addresses multiple vulnerabilities | Splunk
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

[security-announce] SUSE-SU-2017:2700-1: important: Security update for SLES 12-SP1 Docker image - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178

MFSBGN03831 rev. - Service Management Automation, remote disclosure of information
Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

Security Advisory 0024 - Arista
Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0337.html

RHSA-2017:0337 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116

HPSBHF03666 rev.1 - HPE Integrated Lights-Out 4 (iLO 4) using OpenSSL, Remote Disclosure of Information
Third Party Advisory
https://www.tenable.com/security/tns-2016-16

[R7] Nessus 6.9 Fixes Multiple Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2017:2710

RHSA-2017:2710 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:2123

RHSA-2018:2123 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2709

RHSA-2017:2709 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products
Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2021.html

Oracle Critical Patch Update Advisory - October 2021
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html

[security-announce] openSUSE-SU-2017:0513-1: important: Security update for java-1_7_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499

HPSBHF03674 rev.2 - HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information
Third Party Advisory
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/

New Practical Attacks on 64-bit Block Ciphers (3DES, Blowfish)
Press/Media Coverage;Technical Description;Third Party Advisory
http://www.securityfocus.com/archive/1/541104/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
https://kc.mcafee.com/corporate/index?page=content&id=SB10310

McAfee Security Bulletin - Network Security Manager/Network Security Platform/Network Threat Behavior Analysis update fixes multiple vulnerabilities (CVE-2013-4559, CVE-2015-3200, CVE-2016-2183, CVE-2
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:1245

RHSA-2019:1245 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849

HPESBGN03697 rev.3 - HPE Business Service Management (BSM) using OpenSSL, Remote Disclosure of Information
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

CVEs referencing this url
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008

Mitel Product Security Advisory 17-0008
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

[security-announce] SUSE-SU-2016:2387-1: important: Security update for openssl - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697

IBM Security Bulletin: IBM i is affected by several vulnerabilities (CVE-2016-2183 and CVE-2016-6329)
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722

Document - HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities | HPE Support
Third Party Advisory
https://security.netapp.com/advisory/ntap-20170119-0001/

January 2017 Java Platform Standard Edition Vulnerabilities in Multiple NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.ubuntu.com/usn/USN-3179-1

USN-3179-1: OpenJDK 8 vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.splunk.com/view/SP-CAAAPSV

Splunk Enterprise 6.5.1 addresses multiple OpenSSL vulnerabilities | Splunk
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

[security-announce] SUSE-SU-2017:2699-1: important: Security update for SLES 12 Docker image - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613

MFSBGN03805 - HP Service Manager, Remote Disclosure of Information
Third Party Advisory
https://wiki.opendaylight.org/view/Security_Advisories

Security:Advisories - OpenDaylight Project
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403

HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html

[security-announce] SUSE-SU-2017:0490-1: important: Security update for java-1_7_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Juniper Networks - 2016-10 Security Bulletin: OpenSSL security updates
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html

[security-announce] SUSE-SU-2017:1444-1: important: Security update for java-1_6_0-ibm - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilities
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded

Bugtraq
Third Party Advisory;VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Oracle Critical Patch Update - July 2017
Patch;Third Party Advisory

CVEs referencing this url
https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue

SeaCat Application Security Technology Is Not Impacted by the SWEET32 Issue (CVE-2016-2183) · TeskaLabs Blog
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114

RHSA-2017:3114 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html

[security-announce] SUSE-SU-2016:2470-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3087-2

USN-3087-2: OpenSSL regression | Ubuntu security notices | Ubuntu
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

Mailing List;Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2017-0338.html

RHSA-2017:0338 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20160915-0001/

CVE-2016-2183 TLS Protocol 64-bit Cipher Vulnerability in Multiple NetApp Products | NetApp Product Security
Third Party Advisory
http://www.ubuntu.com/usn/USN-3087-1

USN-3087-1: OpenSSL vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3270-1

USN-3270-1: NSS vulnerabilities | Ubuntu security notices | Ubuntu
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html

[security-announce] SUSE-SU-2017:0346-1: important: Security update for java-1_8_0-openjdk - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

[security-announce] openSUSE-SU-2018:0458-1: important: Security update for openssl-steam - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url

Products affected by CVE-2016-2183

Cisco » Content Security Management Appliance » Version: 9.7.0-006
cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:*
Matching versions
Cisco » Content Security Management Appliance » Version: 9.6.6-068
cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 5.0
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Web Server » Version: 1.0.0
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Enterprise Web Server » Version: 2.0.0
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*
Matching versions
Redhat » Jboss Web Server » Version: 3.0
cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Database » Version: 11.2.0.4
cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*
Matching versions
Oracle » Database » Version: 12.1.0.2
cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1f
cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1c
cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1b
cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1e
cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1d
cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1a
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1g
cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1h
cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1i
cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1j
cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1l
cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1k
cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1m
cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2a
cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2b
cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2c
cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1n
cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1o
cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2d
cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2e
cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1q
cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1p
cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2f
cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1r
cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1t
cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2h
cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.5.0 and before (<) 3.5.3
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 2.7.0 and before (<) 2.7.13
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.4.0 and before (<) 3.4.7
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js »
Versions from including (>=) 4.0.0 and before (<) 4.1.2
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Matching versions
Nodejs » Node.js » LTS Edition
Versions from including (>=) 4.2.0 and before (<) 4.6.0
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.10.0 and before (<) 0.10.47
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js »
Versions from including (>=) 6.0.0 and before (<) 6.7.0
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.12.0 and before (<) 0.12.16
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions