Skip to content
Fencer Vulns
medium 5.3

CVE-2023-0296 json

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy com…

published 2023-01-17 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-12373

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 26%
public exploits
0
none known

Summary

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-0296 updated cvss 5.3

openshift: etcd grpc-proxy vulnerable to The Birthday attack against 64-bit block cipher

  • Red Hat OpenShift Container Platform 4.9 openshift4/ose-etcd v4.9.0-202301301454.p0.g9aaa8c6.assembly.stream
    fixed: vendor fix RHSA-2023:0574
  • Red Hat OpenShift Container Platform 4.10 openshift4/ose-etcd v4.10.0-202301062005.p0.g2a91bf0.assembly.stream
    fixed: vendor fix RHSA-2023:0241
  • Red Hat OpenShift Container Platform 4.11 openshift4/ose-etcd v4.11.0-202301041324.p0.gc50e9aa.assembly.stream
    fixed: vendor fix RHSA-2023:0069
  • Red Hat OpenShift Container Platform 4.12 openshift4/ose-etcd v4.12.0-202212121125.p0.g89a451c.assembly.stream
    fixed: vendor fix RHSA-2022:7399
  • Red Hat OpenShift Container Platform 4.9 openshift4/ose-cli v4.9.0-202301301454.p0.g88cfeb4.assembly.stream, openshift4/ose-pod v4.9.0-202301301454.p0.gc763d11.assembly.stream, openshift4/ose-tests v4.9.0-202301301454.p0.g9830fc9.assembly.stream, openshift4/ose-console v4.9.0-202301301454.p0.g04f9d38.assembly.stream, openshift4/ose-coredns v4.9.0-202301302354.p0.ge332b9e.assembly.stream, openshift4/ose-grafana v4.9.0-202301301454.p0.g06135eb.assembly.stream, +148 more Red Hat OpenShift Container Platform 4.10 openshift4/ose-jenkins v4.10.0-202301100754.p0.g30f4d11.assembly.stream, openshift4/ose-installer v4.10.0-202301110156.p0.g7f67c48.assembly.stream, openshift4/ose-ironic-rhel8 v4.10.0-202301161225.p0.gd9dd331.assembly.stream, openshift4/ose-ovn-kubernetes v4.10.0-202301111545.p0.g46b044c.assembly.stream, openshift4/network-tools-rhel8 v4.10.0-202301111545.p0.gbcfec9c.assembly.stream, openshift4/ose-kuryr-cni-rhel8 v4.10.0-202301100835.p0.gd4f4d9a.assembly.stream, +20 more Red Hat OpenShift Container Platform 4.11 openshift4/ose-console v4.11.0-202301102136.p0.gd890c26.assembly.stream, openshift4/ose-installer v4.11.0-202301042055.p0.gf746e45.assembly.stream, openshift4/ose-ironic-rhel8 v4.11.0-202301051736.p0.g72ac16f.assembly.stream, openshift4/ose-thanos-rhel8 v4.11.0-202301051115.p0.ge447c3a.assembly.stream, openshift4/ose-ovn-kubernetes v4.11.0-202301070325.p0.g4b9339a.assembly.stream, openshift4/network-tools-rhel8 v4.11.0-202301070325.p0.g4e87286.assembly.stream, +13 more Red Hat OpenShift Container Platform 4.12 openshift4/ose-cli v4.12.0-202301042354.p0.g854f807.assembly.stream, openshift4/ose-pod v4.12.0-202301042354.p0.g77bec7a.assembly.stream, openshift4/ose-tests v4.12.0-202301050335.p0.g5e41b22.assembly.stream, openshift4/ose-console v4.12.0-202301062016.p0.gb237c34.assembly.stream, openshift4/ose-coredns v4.12.0-202301042354.p0.g9aaa7e0.assembly.stream, openshift4/ose-deployer v4.12.0-202301042354.p0.g854f807.assembly.stream, +172 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
19 mo ago

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 26% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

  • n/a Red Hat OpenShift

Classification

Weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.