OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2016-2183 Public exploit EPSS 95%

  The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

  openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  Sep 1, 2016

Revision history

1. 2025-04-10 #69

   Neue Updates aufgenommen

2. 2025-01-08 #68

   Neue Updates von Juniper aufgenommen

3. 2024-10-13 #67

   Neue Updates von IBM aufgenommen

4. 2024-08-28 #66

   CPE Zuordnungen korrigiert

5. 2024-01-25 #65

   Neue Updates von Dell aufgenommen

6. 2022-12-05 #64

   Neue Updates von HP aufgenommen

7. 2022-11-03 #63

   Neue Updates von IBM aufgenommen

8. 2022-04-10 #62

   Neue Updates von Oracle Linux aufgenommen

9. 2021-04-15 #61

   Neue Updates von Juniper aufgenommen

10. 2021-03-31 #60

    Neue Updates von Oracle Linux aufgenommen

11. 2020-09-30 #59

    Neue Updates von Red Hat aufgenommen

12. 2020-03-30 #58

    Neue Updates von EMC aufgenommen

13. 2019-09-26 #57

    Neue Updates von Red Hat aufgenommen

14. 2019-08-18 #56

    Neue Updates von Oracle Linux aufgenommen

15. 2019-07-30 #55

    Neue Updates von XEROX aufgenommen

16. 2019-05-20 #54

    Neue Updates von Red Hat aufgenommen

17. 2019-03-13 #53

    Neue Updates von Oracle Linux aufgenommen

18. 2019-03-03 #52

    Neue Updates aufgenommen

19. 2019-02-07 #51

    Neue Updates von NetApp aufgenommen

20. 2019-01-30 #50

    Neue Updates von EMC aufgenommen

21. 2018-11-05 #49

    Added references

22. 2018-07-15 #48

    New remediations available

23. 2018-07-03 #47

    New remediations available

24. 2018-01-30 #46

    New remediations available

25. 2017-12-07 #45

    New remediations available

References

• Paper "On the Practical (In-)Security of 64-bit Block Ciphers" von Bhargavan und Leurent vom 2016-08-28
  https://sweet32.info/SWEET32_CCS16.pdf
• OpenSSL Blog vom 2016-08-24
  https://www.openssl.org/blog/blog/2016/08/24/sweet32/
• Red Hat Knowledgebase Artikel "SWEET32: Birthday attacks against TLS ciphers with 64bit block size"
  https://access.redhat.com/articles/2548661
• Debian Security Advisory DSA-3673 vom 2016-09-22
  https://www.debian.org/security/2016/dsa-3673
• Ubuntu Security Notice USN-3087-2 vom 2016-09-23
  http://www.ubuntu.com/usn/usn-3087-2/
• SUSE Security Update Announcement ID SUSE-SU-2016:2387-1
  https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html
• Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27
  https://access.redhat.com/errata/RHSA-2016:1940
• SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27
  https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html
• CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05
  https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html
• Arista Security Advisory 0024 vom 2016-10-05
  http://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24
• F5 Security Advisory sol13167034 vom 2016-10-05
  https://support.f5.com/kb/en-us/solutions/public/k/13/sol13167034.html?ref=rss
• SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html
• SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html
• Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2470-2 vom 2016-11-01
  https://www.suse.com/support/update/announcement/2016/suse-su-20162470-2.html
• HPE SECURITY BULLETIN c05323116 vom 2016-11-01
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05323116
• BLUECOAT Security Advisory SA133 vom 2016-12-23
  https://bto.bluecoat.com/security-advisory/sa133
• HP Security Bulletin c05369403
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05369403
• SUSE Security Update SUSE-SU-2017:0460-1 vom 2017-02-14
  https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html
• SUSE Security Update SUSE-SU-2017:0490-1 vom 2017-02-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170490-1.html
• Red Hat Security Advisory RHSA-2017:0462 vom 2017-03-08
  https://access.redhat.com/errata/RHSA-2017:0462
• Xerox Security Bulletin XRX17-006 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf
• Xerox Security Bulletin XRX17-005 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf
• SUSE Security Update SUSE-SU-2017:0719-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170719-1.html
• SUSE Security Update SUSE-SU-2017:0716-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1.html
• SUSE Security Update SUSE-SU-2017:0726-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170726-1.html
• Xerox Security Mini Bulletin XRX17D vom 2017-03-28
  https://www.xerox.com/download/security/security-bulletin/252f0-54bcf4b63fb29/cert_Mini_Security_Bulletin_XRX17D_for_ConnectKey_R17-02_v1.0.docx
• SUSE Security Update SUSE-SU-2017:0839-1 vom 2017-03-29
  https://www.suse.com/support/update/announcement/2017/suse-su-20170839-1.html
• HPE Security Bulletin HPESBUX03725 vom 2017-03-29
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbux03725en_us
• NetApp Advisory Number NTAP-20170119-0001
  https://kb.netapp.com/support/s/article/ka51A00000007P2QAI/NTAP-20170119-0001?language=en_US
• Ubuntu Security Notice USN-3270-1 vom 2017-04-27
  http://www.ubuntu.com/usn/usn-3270-1/
• McAfee Security Advisory
  https://kc.mcafee.com/corporate/index?page=content&id=SB10197
• SUSE Security Update SUSE-SU-2017:1389-1 vom 2017-05-24
  https://www.suse.com/support/update/announcement/2017/suse-su-20171389-1.html
• Red Hat Security Advisory RHSA-2017:2710 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2710
• Red Hat Security Advisory RHSA-2017:2709 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2709
• Red Hat Security Advisory RHSA-2017:2708 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2708
• Red Hat Security Advisory RHSA-2017:3114 vom 2017-11-02
  https://access.redhat.com/errata/RHSA-2017:3114
• Red Hat Security Advisory RHSA-2017:3113 vom 2017-11-02
  https://access.redhat.com/errata/RHSA-2017:3113
• Red Hat Security Advisory RHSA-2017:3240 vom 2017-11-16
  https://access.redhat.com/errata/RHSA-2017:3240
• Red Hat Security Advisory RHSA-2017:3239 vom 2017-11-16
  https://access.redhat.com/errata/RHSA-2017:3239
• McAfee Security Bulletin:SB10215
  https://kc.mcafee.com/corporate/index?page=content&id=SB10215
• NetApp Security Advisory NTAP-20160915-0001 vom 2018-01-30
  https://security.netapp.com/advisory/ntap-20160915-0001/
• Red Hat Security Advisory RHSA-2018:2123 vom 2018-07-03
  http://rhn.redhat.com/errata/RHSA-2018-2123.html
• CentOS Security Advisory CESA-2018:2123 vom 2018-07-13
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2123-Moderate-CentOS-7-python-Security-Update-tp4645172.html
• Dell/EMC Knowledge Base Article: 000529947
  https://support.emc.com/kb/529947
• NetApp Security Advisory NTAP-20170119-0001 vom 2019-02-07
  https://security.netapp.com/advisory/ntap-20170119-0001/
• Fortinet PSIRT Advisory FG-IR-17-173
  https://fortiguard.com/psirt/FG-IR-17-173
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Red Hat Security Advisory RHSA-2019:1245 vom 2019-05-20
  https://access.redhat.com/errata/RHSA-2019:1245
• Xerox Mini Bulletin XRX19M
  https://security.business.xerox.com/wp-content/uploads/2019/06/cert_Security_Mini_Bulletin_XRX19M_for_WC57xx.pdf
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Red Hat Security Advisory RHSA-2019:2859 vom 2019-09-27
  https://access.redhat.com/errata/RHSA-2019:2859
• EMC Security Advisory 542344 vom 2020-03-31
  https://www.dell.com/support/security/de-de/details/542344/DSA-2020-072-Dell-EMC-VNX2-Family-Security-Update-for-Multiple-Third-Party-Component-Vulnerabilit
• Red Hat Security Advisory RHSA-2020:3842 vom 2020-10-01
  https://access.redhat.com/errata/RHSA-2020:3842
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Juniper Security Advisory JSA11172 vom 2021-04-16
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11172
• Juniper Security Advisory JSA11174 vom 2021-04-16
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11174
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• IBM Security Bulletin 6836869 vom 2022-11-04
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-is-vulnerable-to-sweet32-birthday-attack-cve-2016-2183/
• HP Security Bulletin HPSBPI03823 vom 2022-12-06
  https://support.hp.com/us-en/document/ish_7328903-7328970-16/HPSBPI03823
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
• IBM Security Bulletin 7173018 vom 2024-10-14
  https://www.ibm.com/support/pages/node/7173018
• Juniper Security Advisory JSA92874 vom 2024-01-09
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release?language=en_US