01 Record

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for

HighPUBLISHEDCNA: redhat

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

View raw JSON

02 Description

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

95.71% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.9% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2016-09-01 00:00Z10 YR AGO

Last updated

2026-05-29 20:25Z3 MO AGO

Reserved

2016-01-29

Assigning CNA

redhat

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass
CWE-327Use of a Broken or Risky Cryptographic AlgorithmClass

Data version

5.2

Document digest

79e2973e2932e8bd3c3a249986759cd69322b3fc178a467e7c1166ba64d90782

05 Affected products

VendorProductVersionsPlatforms

ciscocontent_security_management_applianceNot specified—

nodejsnode.jsNot specified—

opensslopensslNot specified—

oracledatabaseNot specified—

pythonpythonNot specified—

redhatenterprise_linuxNot specified—

redhatjboss_core_servicesNot specified—

redhatjboss_enterprise_application_platformNot specified—

redhatjboss_enterprise_web_serverNot specified—

redhatjboss_web_serverNot specified—

redhatnetwork_satelliteNot specified—

redhatopenshiftNot specified—

redhatopenstackNot specified—

redhatquayNot specified—

redhatrhel_extrasNot specified—

06 References

access.redhat.comRHSA-2017:3113https://access.redhat.com/errata/RHSA-2017:3113vendor-advisory
rhn.redhat.comRHSA-2017:0338http://rhn.redhat.com/errata/RHSA-2017-0338.htmlvendor-advisory
www.tenable.comhttps://www.tenable.com/security/tns-2016-20
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us
security.gentoo.orgGLSA-201612-16https://security.gentoo.org/glsa/201612-16vendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
kb.pulsesecure.nethttps://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415
access.redhat.comRHSA-2017:3240https://access.redhat.com/errata/RHSA-2017:3240vendor-advisory
www.tenable.comhttps://www.tenable.com/security/tns-2016-16
access.redhat.comRHSA-2017:2709https://access.redhat.com/errata/RHSA-2017:2709vendor-advisory
www.securityfocus.com92630http://www.securityfocus.com/bid/92630vdb-entry
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499
www.tenable.comhttps://www.tenable.com/security/tns-2016-21
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10171
access.redhat.comRHSA-2017:3239https://access.redhat.com/errata/RHSA-2017:3239vendor-advisory
www.exploit-db.com42091https://www.exploit-db.com/exploits/42091/exploit
security.gentoo.orgGLSA-201701-65https://security.gentoo.org/glsa/201701-65vendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
www.securitytracker.com1036696http://www.securitytracker.com/id/1036696vdb-entry
security.netapp.comhttps://security.netapp.com/advisory/ntap-20160915-0001/
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us
security.gentoo.orgGLSA-201707-01https://security.gentoo.org/glsa/201707-01vendor-advisory
www.securityfocus.com95568http://www.securityfocus.com/bid/95568vdb-entry
access.redhat.comRHSA-2017:3114https://access.redhat.com/errata/RHSA-2017:3114vendor-advisory
bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa133
www.tenable.comhttps://www.tenable.com/security/tns-2017-09
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116
access.redhat.comRHSA-2017:1216https://access.redhat.com/errata/RHSA-2017:1216vendor-advisory
wiki.opendaylight.orghttps://wiki.opendaylight.org/view/Security_Advisories
access.redhat.comRHSA-2017:2710https://access.redhat.com/errata/RHSA-2017:2710vendor-advisory
security.netapp.comhttps://security.netapp.com/advisory/ntap-20170119-0001/
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984
www.ietf.org[tls] 20091120 RC4+3DES rekeying - long-lived TLS connectionshttps://www.ietf.org/mail-archive/web/tls/current/msg04560.htmlmailing-list
access.redhat.comRHSA-2018:2123https://access.redhat.com/errata/RHSA-2018:2123vendor-advisory
rhn.redhat.comRHSA-2017:0337http://rhn.redhat.com/errata/RHSA-2017-0337.htmlvendor-advisory
access.redhat.comRHSA-2017:2708https://access.redhat.com/errata/RHSA-2017:2708vendor-advisory
rhn.redhat.comRHSA-2017:0336http://rhn.redhat.com/errata/RHSA-2017-0336.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2016:2470http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.htmlvendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
rhn.redhat.comRHSA-2017:0462http://rhn.redhat.com/errata/RHSA-2017-0462.htmlvendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10215
lists.opensuse.orgSUSE-SU-2017:2700http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.htmlvendor-advisory
www.securityfocus.com20170329 [security bulletin] HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilitieshttp://www.securityfocus.com/archive/1/540341/100/0/threadedmailing-list
www.ubuntu.comUSN-3087-1http://www.ubuntu.com/usn/USN-3087-1vendor-advisory
lists.opensuse.orgSUSE-SU-2016:2469http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.htmlvendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680
lists.opensuse.orgopenSUSE-SU-2016:2537http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.htmlvendor-advisory
www.securityfocus.com20161207 [security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/archive/1/539885/100/0/threadedmailing-list
www.ubuntu.comUSN-3087-2http://www.ubuntu.com/usn/USN-3087-2vendor-advisory
www.securityfocus.com20180510 [security bulletin] MFSBGN03805 - HP Service Manager, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/archive/1/542005/100/0/threadedmailing-list
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10197
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10186
lists.opensuse.orgSUSE-SU-2017:2699http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.htmlvendor-advisory
www.securityfocus.com20170831 [security bulletin] HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/archive/1/541104/100/0/threadedmailing-list
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849
lists.opensuse.orgopenSUSE-SU-2016:2407http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.htmlvendor-advisory
softwaresupport.softwaregrp.comhttps://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613
seclists.org20170717 Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilitieshttp://seclists.org/fulldisclosure/2017/Jul/31mailing-list
www.ubuntu.comUSN-3194-1http://www.ubuntu.com/usn/USN-3194-1vendor-advisory
lists.opensuse.orgSUSE-SU-2016:2458http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.htmlvendor-advisory
seclists.org20181113 [security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of informationhttps://seclists.org/bugtraq/2018/Nov/21mailing-list
support.f5.comhttps://support.f5.com/csp/article/K13167034
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722
www.securityfocus.com20180510 [security bulletin] MFSBGN03805 - HP Service Manager, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/542005/100/0/threadedmailing-list
www.debian.orgDSA-3673http://www.debian.org/security/2016/dsa-3673vendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:2391http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.htmlvendor-advisory
www.ubuntu.comUSN-3372-1http://www.ubuntu.com/usn/USN-3372-1vendor-advisory
lists.opensuse.orgopenSUSE-SU-2018:0458http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2017:0460http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2017:0490http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.htmlvendor-advisory
www.ubuntu.comUSN-3270-1http://www.ubuntu.com/usn/USN-3270-1vendor-advisory
www.securityfocus.com20170214 [security bulletin] HPESBGN03697 rev.1 - HPE Business Service Management (BSM), Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/archive/1/540129/100/0/threadedmailing-list
softwaresupport.softwaregrp.comhttps://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178
lists.opensuse.orgSUSE-SU-2016:2387http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.htmlvendor-advisory
seclists.org20170529 SSD Advisory - IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilitieshttp://seclists.org/fulldisclosure/2017/May/105mailing-list
lists.opensuse.orgopenSUSE-SU-2017:0513http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.htmlvendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448
www.securityfocus.com20161207 [security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/539885/100/0/threadedmailing-list
lists.opensuse.orgopenSUSE-SU-2017:0374http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.htmlvendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415
packetstormsecurity.comhttp://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html
lists.opensuse.orgSUSE-SU-2016:2468http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2017:0346http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.htmlvendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:2496http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.htmlvendor-advisory
www.ubuntu.comUSN-3198-1http://www.ubuntu.com/usn/USN-3198-1vendor-advisory
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403
www.securityfocus.com20170831 [security bulletin] HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Informationhttp://www.securityfocus.com/archive/1/541104/100/0/threadedmailing-list
lists.opensuse.orgSUSE-SU-2017:1444http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2016:2394http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.htmlvendor-advisory
www.securityfocus.com20170329 [security bulletin] HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilitieshttp://www.securityfocus.com/archive/1/archive/1/540341/100/0/threadedmailing-list
www.ubuntu.comUSN-3179-1http://www.ubuntu.com/usn/USN-3179-1vendor-advisory
www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en
access.redhat.comRHSA-2019:1245https://access.redhat.com/errata/RHSA-2019:1245vendor-advisory
access.redhat.comRHSA-2019:2859https://access.redhat.com/errata/RHSA-2019:2859vendor-advisory
access.redhat.comRHSA-2020:0451https://access.redhat.com/errata/RHSA-2020:0451vendor-advisory
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10310
www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.html
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2020.html
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
sweet32.infohttps://sweet32.info/
www.splunk.comhttp://www.splunk.com/view/SP-CAAAPUE
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1369383
blog.cryptographyengineering.comhttps://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
access.redhat.comhttps://access.redhat.com/articles/2548661
www.teskalabs.comhttps://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue
www.splunk.comhttp://www.splunk.com/view/SP-CAAAPSV
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21995039
github.comhttps://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633
nodejs.orghttps://nodejs.org/en/blog/vulnerability/september-2016-security-releases/
www.sigsac.orghttps://www.sigsac.org/ccs/CCS2016/accepted-papers/
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21991482
www.openssl.orghttps://www.openssl.org/blog/blog/2016/08/24/sweet32/
access.redhat.comhttps://access.redhat.com/security/cve/cve-2016-2183
www.nccgroup.trusthttps://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/
ics-cert.us-cert.govhttps://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
nakedsecurity.sophos.comhttps://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/
www.mitel.comhttps://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1021697
www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2021.html
www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability

01 Record index

CVE-2016-2183

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2016-2183

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References