CVE-2016-2183
CVE-2016-2183
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
CVSS 7.5 · Alta · EPSS 94,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
nss Ubuntu:14.04:LTS
- Versiones
- 2:3.15.1-1ubuntu1
- 2:3.15.2-1
- 2:3.15.3-1
- 2:3.15.3.1-1
- 2:3.15.3.1-1.1
- 2:3.15.3.1-1.1ubuntu1
- 2:3.15.4-1ubuntu3
- 2:3.15.4-1ubuntu4
- 2:3.15.4-1ubuntu5
- 2:3.15.4-1ubuntu6
- 2:3.15.4-1ubuntu7
- 2:3.15.4-1ubuntu7.1
- 2:3.17-0ubuntu0.14.04.1
- 2:3.17.1-0ubuntu0.14.04.1
- 2:3.17.1-0ubuntu0.14.04.2
- 2:3.17.4-0ubuntu0.14.04.1
- 2:3.19.2-0ubuntu0.14.04.1
- 2:3.19.2.1-0ubuntu0.14.04.1
- 2:3.19.2.1-0ubuntu0.14.04.2
- 2:3.21-0ubuntu0.14.04.1
- 2:3.21-0ubuntu0.14.04.2
- 2:3.23-0ubuntu0.14.04.1
- 2:3.26.2-0ubuntu0.14.04.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:3.28.4-0ubuntu0.14.04.1
Actualiza a 2:3.28.4-0ubuntu0.14.04.1
openjdk-6 Ubuntu:14.04:LTS
- Versiones
- 6b27-1.12.6-1ubuntu2
- 6b27-1.12.7-2ubuntu1
- 6b29-1.13.0-1ubuntu2
- 6b30-1.13.1-1ubuntu1
- 6b30-1.13.1-1ubuntu2
- 6b30-1.13.2-1ubuntu1
- 6b31-1.13.3-1ubuntu1
- 6b32-1.13.4-4ubuntu0.14.04.1
- 6b33-1.13.5-1ubuntu0.14.04
- 6b34-1.13.6-1ubuntu0.14.04.1
- 6b35-1.13.7-1ubuntu0.14.04.1
- 6b36-1.13.8-0ubuntu1~14.04
- 6b37-1.13.9-1ubuntu0.14.04.1
- 6b38-1.13.10-0ubuntu0.14.04.1
- 6b39-1.13.11-0ubuntu0.14.04.1
- 6b40-1.13.12-0ubuntu0.14.04.2
- 6b40-1.13.12-0ubuntu0.14.04.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 6b41-1.13.13-0ubuntu0.14.04.1
Actualiza a 6b41-1.13.13-0ubuntu0.14.04.1
openjdk-7 Ubuntu:14.04:LTS
- Versiones
- 7u25-2.3.12-4ubuntu3
- 7u25-2.3.12-4ubuntu5
- 7u45-2.4.3-3ubuntu1
- 7u45-2.4.3-3ubuntu2
- 7u45-2.4.3-4ubuntu1
- 7u45-2.4.3-4ubuntu2
- 7u51-2.4.4-1ubuntu1
- 7u51-2.4.5-1ubuntu1
- 7u51-2.4.6~pre1-1ubuntu2
- 7u51-2.4.6-1ubuntu3
- 7u51-2.4.6-1ubuntu4
- 7u55-2.4.7-1ubuntu1
- 7u65-2.5.1-4ubuntu1~0.14.04.1
- 7u65-2.5.1-4ubuntu1~0.14.04.2
- 7u65-2.5.2-3~14.04
- 7u71-2.5.3-0ubuntu0.14.04.1
- 7u75-2.5.4-1~trusty1
- 7u79-2.5.5-0ubuntu0.14.04.2
- 7u79-2.5.6-0ubuntu1.14.04.1
- 7u85-2.6.1-5ubuntu0.14.04.1
- 7u91-2.6.3-0ubuntu0.14.04.1
- 7u95-2.6.4-0ubuntu0.14.04.1
- 7u95-2.6.4-0ubuntu0.14.04.2
- 7u101-2.6.6-0ubuntu0.14.04.1
- 7u111-2.6.7-0ubuntu0.14.04.3
- 7u121-2.6.8-1ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 7u121-2.6.8-1ubuntu0.14.04.3
Actualiza a 7u121-2.6.8-1ubuntu0.14.04.3
openssl Ubuntu:14.04:LTS
- Versiones
- 1.0.1e-3ubuntu1
- 1.0.1e-4ubuntu1
- 1.0.1e-4ubuntu2
- 1.0.1e-4ubuntu3
- 1.0.1e-4ubuntu4
- 1.0.1f-1ubuntu1
- 1.0.1f-1ubuntu2
- 1.0.1f-1ubuntu2.1
- 1.0.1f-1ubuntu2.2
- 1.0.1f-1ubuntu2.3
- 1.0.1f-1ubuntu2.4
- 1.0.1f-1ubuntu2.5
- 1.0.1f-1ubuntu2.7
- 1.0.1f-1ubuntu2.8
- 1.0.1f-1ubuntu2.11
- 1.0.1f-1ubuntu2.12
- 1.0.1f-1ubuntu2.15
- 1.0.1f-1ubuntu2.16
- 1.0.1f-1ubuntu2.17
- 1.0.1f-1ubuntu2.18
- 1.0.1f-1ubuntu2.19
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.1f-1ubuntu2.20
Actualiza a 1.0.1f-1ubuntu2.20
nss Ubuntu:16.04:LTS
- Versiones
- 2:3.19.2-1ubuntu1
- 2:3.19.2.1-0ubuntu1
- 2:3.21-1ubuntu2
- 2:3.21-1ubuntu3
- 2:3.21-1ubuntu4
- 2:3.23-0ubuntu0.16.04.1
- 2:3.26.2-0ubuntu0.16.04.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:3.28.4-0ubuntu0.16.04.1
Actualiza a 2:3.28.4-0ubuntu0.16.04.1
openjdk-8 Ubuntu:16.04:LTS
- Versiones
- 8u66-b01-5
- 8u72-b05-1ubuntu1
- 8u72-b05-5
- 8u72-b05-6
- 8u72-b15-1
- 8u72-b15-2ubuntu1
- 8u72-b15-2ubuntu3
- 8u72-b15-3ubuntu1
- 8u77-b03-1ubuntu2
- 8u77-b03-3ubuntu1
- 8u77-b03-3ubuntu2
- 8u77-b03-3ubuntu3
- 8u91-b14-0ubuntu4~16.04.1
- 8u91-b14-3ubuntu1~16.04.1
- 8u111-b14-2ubuntu0.16.04.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 8u121-b13-0ubuntu1.16.04.2
Actualiza a 8u121-b13-0ubuntu1.16.04.2
openssl Ubuntu:16.04:LTS
- Versiones
- 1.0.2d-0ubuntu1
- 1.0.2d-0ubuntu2
- 1.0.2e-1ubuntu1
- 1.0.2f-2ubuntu1
- 1.0.2g-1ubuntu2
- 1.0.2g-1ubuntu3
- 1.0.2g-1ubuntu4
- 1.0.2g-1ubuntu4.1
- 1.0.2g-1ubuntu4.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.2g-1ubuntu4.4
Actualiza a 1.0.2g-1ubuntu4.4
Fuentes originales
- https://access.redhat.com/errata/RHSA-2017:3113
- http://rhn.redhat.com/errata/RHSA-2017-0338.html
- https://www.tenable.com/security/tns-2016-20
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us
- https://security.gentoo.org/glsa/201612-16
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415
- https://access.redhat.com/errata/RHSA-2017:3240
- https://www.tenable.com/security/tns-2016-16
- https://access.redhat.com/errata/RHSA-2017:2709
- http://www.securityfocus.com/bid/92630
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499
- https://www.tenable.com/security/tns-2016-21
- https://kc.mcafee.com/corporate/index?page=content&id=SB10171
- https://access.redhat.com/errata/RHSA-2017:3239
- https://www.exploit-db.com/exploits/42091/
- https://security.gentoo.org/glsa/201701-65
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- http://www.securitytracker.com/id/1036696
- https://security.netapp.com/advisory/ntap-20160915-0001/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us
- https://nvd.nist.gov/vuln/detail/CVE-2016-2183