Skip to content
Fencer Vulns
high 7.5

CVE-2016-2183 in the critical feed json

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of app…

published 2016-09-01 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-3268

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
94.7%
EPSS 94.7% chance of exploitation in 30 days, percentile 99.8%
public exploits
0
none known

Summary

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Patch / fix

  • python python 2.7.13, 3.4.7, 3.5.3
  • nodejs node.js 0.10.47, 0.12.16, 4.1.2, 4.6.0, 6.7.0
  • nss Ubuntu 14.04 LTS 2:3.28.4-0ubuntu0.14.04.1
  • nss Ubuntu 16.04 LTS 2:3.28.4-0ubuntu0.16.04.1
  • openssl Ubuntu 14.04 LTS 1.0.1f-1ubuntu2.20
  • openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu4.4
  • openjdk-6 Ubuntu 14.04 LTS 6b41-1.13.13-0ubuntu0.14.04.1
  • openjdk-7 Ubuntu 14.04 LTS 7u121-2.6.8-1ubuntu0.14.04.3
  • openjdk-8 Ubuntu 16.04 LTS 8u121-b13-0ubuntu1.16.04.2

ubuntu advisories UBUNTU-CVE-2016-2183

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • java-1.6.0-ibm RHEL 5 EXTRAS 1:1.6.0.16.41-1jpp.1.el5_11
  • java-1.6.0-ibm RHEL 6 EXTRAS 1:1.6.0.16.41-1jpp.1.el6_8
  • java-1.6.0-ibm-src RHEL 5 EXTRAS 1:1.6.0.16.41-1jpp.1.el5_11
  • java-1.6.0-ibm-src RHEL 6 EXTRAS 1:1.6.0.16.41-1jpp.1.el6_8
  • java-1.6.0-ibm-demo RHEL 5 EXTRAS 1:1.6.0.16.41-1jpp.1.el5_11
  • java-1.6.0-ibm-demo RHEL 6 EXTRAS 1:1.6.0.16.41-1jpp.1.el6_8
  • java-1.6.0-ibm-jdbc RHEL 5 EXTRAS 1:1.6.0.16.41-1jpp.1.el5_11
  • java-1.6.0-ibm-jdbc RHEL 6 EXTRAS 1:1.6.0.16.41-1jpp.1.el6_8

red hat advisories RHSA-2017:0338RHSA-2017:0337RHSA-2017:0336RHSA-2017:1216RHSA-2017:3113RHSA-2016:1940

  • java-1_6_0-ibm SLES 11 SP3-TERADATA, SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3 1.6.0_sr16.45-84.1
  • java-1_6_0-ibm SLE Module for Legacy 12 1.6.0_sr16.45-49.1
  • java-1_8_0-ibm SLES for SAP 12 SP2, SLES for SAP 12 SP1, SLES 12 SP2 +3 more 1.8.0_sr4.1-26.2
  • java-1_6_0-ibm SLE Module for Legacy 12 1.6.0_sr16.41-46.1
  • java-1_7_1-ibm SLES for SAP 12 SP2, SLES for SAP 12 SP1, SLES for SAP 12 +5 more 1.7.1_sr4.1-34.1
  • java-1_7_1-ibm SLES for SAP 11 SP4, SLES 11 SP4, SLE Software Development Kit 11 SP4 1.7.1_sr4.1-22.1
  • java-1_7_0-ibm SLES 11 SP3-TERADATA, SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3 +3 more 1.7.0_sr10.1-61.1
  • java-1_7_0-openjdk SLES for SAP 12 SP2, SLES for SAP 12 SP1, SLES for SAP 12 +6 more 1.7.0.131-39.1

suse advisories SUSE-SU-2019:14246-1SUSE-SU-2017:1444-1SUSE-SU-2017:1389-1SUSE-SU-2017:0839-1SUSE-SU-2017:0726-1SUSE-SU-2017:0720-1

  • java-1_8_0-openjdk openSUSE Tumbleweed 1.8.0.302-2.2
  • openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2

opensuse advisories openSUSE-SU-2024:10876-1openSUSE-SU-2024:11127-1

  • openssl Alpine 3.8, Alpine 3.7, Alpine 3.6 +4 more 1.0.2i-r0

alpine advisories ALPINE-CVE-2016-2183

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • openssl Arch Linux 1.0.2.i-1
  • lib32-openssl Arch Linux 1:1.0.2.i-1

arch linux advisories AVG-29AVG-30

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-2183 updated cvss 7.5

SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

  • Red Hat Enterprise Linux 5 nss, openssl, openssl097a Red Hat Enterprise Linux 6 nss, nss-tools, nss-sysinit, openssl098e Red Hat Enterprise Linux 7 nss, nss-tools, nss-sysinit, openssl098e Red Hat JBoss Enterprise Web Server 1 openssl Red Hat JBoss Enterprise Web Server 3 openssl
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 4 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator
    affected: workaround, no fix available
  • Red Hat OpenStack Platform 8 (Liberty) opendaylight Red Hat OpenStack Platform 9 (Mitaka) opendaylight Red Hat OpenStack Platform 10 (Newton) opendaylight Red Hat OpenStack Platform 11 (Ocata) opendaylight
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Enterprise Linux Client (v. 7) python 2.7.5-69.el7_5, openssl 1.0.1e-51.el7_2.7, python-libs 2.7.5-69.el7_5, openssl-libs 1.0.1e-51.el7_2.7 Red Hat Enterprise Linux Client Optional (v. 7) tkinter 2.7.5-69.el7_5, python-test 2.7.5-69.el7_5, python-tools 2.7.5-69.el7_5, openssl-perl 1.0.1e-51.el7_2.7
    fixed: vendor fix RHSA-2016:1940
  • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-jdbc 1.7.1.4.1-1jpp.2.el7, +4 more
    fixed: vendor fix RHSA-2017:0336
  • Red Hat Enterprise Linux ComputeNode (v. 7) python 2.7.5-69.el7_5, openssl 1.0.1e-51.el7_2.7, python-libs 2.7.5-69.el7_5, openssl-libs 1.0.1e-51.el7_2.7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) tkinter 2.7.5-69.el7_5, python-test 2.7.5-69.el7_5, python-tools 2.7.5-69.el7_5, openssl-perl 1.0.1e-51.el7_2.7
    fixed: vendor fix RHSA-2016:1940
  • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm-demo 1.8.0.4.1-1jpp.2.el7
    fixed: vendor fix RHSA-2017:0336
  • Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-perl 1.0.1e-48.el6_8.3
    fixed: vendor fix RHSA-2016:1940
show 12 more
  • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm 1.7.0.10.1-1jpp.1.el5_11, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el5_11, java-1.7.0-ibm-src 1.7.0.10.1-1jpp.1.el5_11, java-1.6.0-ibm-src 1.6.0.16.41-1jpp.1.el5_11, java-1.7.0-ibm-demo 1.7.0.10.1-1jpp.1.el5_11, java-1.7.0-ibm-jdbc 1.7.0.10.1-1jpp.1.el5_11, +6 more Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm 1.8.0.4.1-1jpp.1.el6_8, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el6_8, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.1.el6_8, +10 more
    fixed: vendor fix RHSA-2017:0338
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) python 2.7.5-69.el7_5, python-libs 2.7.5-69.el7_5 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) tkinter 2.7.5-69.el7_5, python-test 2.7.5-69.el7_5, python-tools 2.7.5-69.el7_5
    fixed: vendor fix RHSA-2018:2123
  • Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-perl 1.0.1e-48.el6_8.3
    fixed: vendor fix RHSA-2016:1940
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm 1.8.0.4.1-1jpp.1.el6_8, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el6_8, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.1.el6_8, +4 more
    fixed: vendor fix RHSA-2017:0338
  • Red Hat Enterprise Linux Server (v. 6) openssl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux Server (v. 7) python 2.7.5-69.el7_5, openssl 1.0.1e-51.el7_2.7, python-libs 2.7.5-69.el7_5, openssl-libs 1.0.1e-51.el7_2.7 Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux Server Optional (v. 7) tkinter 2.7.5-69.el7_5, python-test 2.7.5-69.el7_5, python-tools 2.7.5-69.el7_5, openssl-perl 1.0.1e-51.el7_2.7
    fixed: vendor fix RHSA-2016:1940
  • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm 1.7.0.10.1-1jpp.1.el5_11, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el5_11, java-1.7.0-ibm-src 1.7.0.10.1-1jpp.1.el5_11, java-1.6.0-ibm-src 1.6.0.16.41-1jpp.1.el5_11, java-1.7.0-ibm-demo 1.7.0.10.1-1jpp.1.el5_11, java-1.7.0-ibm-jdbc 1.7.0.10.1-1jpp.1.el5_11, +6 more Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm 1.8.0.4.1-1jpp.1.el6_8, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el6_8, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.1.el6_8, +10 more
    fixed: vendor fix RHSA-2017:0338
  • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-jdbc 1.7.1.4.1-1jpp.2.el7, +4 more
    fixed: vendor fix RHSA-2017:0336
  • Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux Workstation (v. 7) python 2.7.5-69.el7_5, openssl 1.0.1e-51.el7_2.7, python-libs 2.7.5-69.el7_5, openssl-libs 1.0.1e-51.el7_2.7 Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl 1.0.1e-48.el6_8.3 Red Hat Enterprise Linux Workstation Optional (v. 7) tkinter 2.7.5-69.el7_5, python-test 2.7.5-69.el7_5, python-tools 2.7.5-69.el7_5, openssl-perl 1.0.1e-51.el7_2.7
    fixed: vendor fix RHSA-2016:1940
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm 1.8.0.4.1-1jpp.1.el6_8, java-1.6.0-ibm 1.6.0.16.41-1jpp.1.el6_8, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.1.el6_8, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.1.el6_8, +10 more
    fixed: vendor fix RHSA-2017:0338
  • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-src 1.7.1.4.1-1jpp.2.el7, java-1.8.0-ibm-src 1.8.0.4.1-1jpp.2.el7, java-1.7.1-ibm-demo 1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-jdbc 1.7.1.4.1-1jpp.2.el7, +4 more
    fixed: vendor fix RHSA-2017:0336
  • Red Hat JBoss Core Services
    fixed: vendor fix RHSA-2017:2708
  • Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-httpd 2.4.23-122.jbcs.el6, jbcs-httpd24-openssl 1.0.2h-14.jbcs.el6, jbcs-httpd24-mod_ssl 2.4.23-122.jbcs.el6, jbcs-httpd24-mod_ldap 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-libs 2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-tools 2.4.23-122.jbcs.el6, +6 more
    fixed: vendor fix RHSA-2017:2710

15 more fixed, 6 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-21-075-02 updated cvss 7.5

GE UR Family (Update A)

  • GE Veronva UR B30 <8.10 GE Veronva UR B90 <8.10 GE Veronva UR C30 <8.10 GE Veronva UR C60 <8.10 GE Veronva UR C70 <8.10 GE Veronva UR C95 <8.10
    +13 more products
    GE Veronva UR D30 <8.10 GE Veronva UR D60 <8.10 GE Veronva UR F35 <8.10 GE Veronva UR F60 <8.10 GE Veronva UR G30 <8.10 GE Veronva UR G60 <8.10 GE Veronva UR L30 <8.10 GE Veronva UR L60 <8.10 GE Veronva UR L90 <8.10 GE Veronva UR M60 <8.10 GE Veronva UR N60 <8.10 GE Veronva UR T35 <8.10 GE Veronva UR T60 <8.10
    affected: vendor fix, mitigation “GE recommends users refer to the UR Deployment guide for secure configuration of UR IED and system.” gegridsolutions.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-22-349-21 updated cvss 7.5

Siemens SCALANCE X-200RNA Switch Devices

  • Siemens SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) <V3.2.7 Siemens SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) <V3.2.7 Siemens SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3) <V3.2.7
    affected: fixed in V3.2.7, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-22-160-01 updated cvss 7.5

Mitsubishi Electric Air Conditioning Systems

  • Mitsubishi Electric AE-50A <= 7.97 Mitsubishi Electric AE-50E <= 7.97 Mitsubishi Electric AE-50J <= 7.97 Mitsubishi Electric AE-200A <= 7.97 Mitsubishi Electric AE-200E <= 7.97 Mitsubishi Electric AE-200J <= 7.97
    +14 more products
    Mitsubishi Electric AG-150A-A <= 3.21 Mitsubishi Electric AG-150A-J <= 3.21 Mitsubishi Electric EB-50GU-A <= 7.10 Mitsubishi Electric EB-50GU-J <= 7.10 Mitsubishi Electric EW-50A <= 7.97 Mitsubishi Electric EW-50E <= 7.97 Mitsubishi Electric EW-50J <= 7.97 Mitsubishi Electric G-150AD <= 3.21 Mitsubishi Electric GB-50AD <= 3.21 Mitsubishi Electric GB-50ADA-A <= 3.21 Mitsubishi Electric GB-50ADA-J <= 3.21 Mitsubishi Electric TE-50A <= 7.97 Mitsubishi Electric TE-200A <= 7.97 Mitsubishi Electric TW-50A <= 7.97
    affected: fixed in 7.98, mitigation “G-150AD: Replace the air conditioning systems to AE-200J, AE-50J or EW-50J Version 7.98 or later” mitsubishielectric.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSMA-18-058-02 updated cvss 7.5

Philips Intellispace Portal ISP Vulnerabilities

  • Phillips IntelliSpace Portal 7.0.x Phillips IntelliSpace Portal 8.0.x
    affected: mitigation “Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.” usa.philips.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

94.70% chance of exploitation in the next 30 days, higher than 99.8% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • exploit-db.com https://www.exploit-db.com/exploits/42091/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.