Description
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | nss | 2:3.28.4-0ubuntu0.16.04.1 | USN-3270-1 |
| Ubuntu 16.04 LTS | openjdk-8 | 8u121-b13-0ubuntu1.16.04.2 | USN-3179-1 |
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu4.4 | USN-3087-1 |
| Ubuntu 14.04 LTS | nss | 2:3.28.4-0ubuntu0.14.04.1 | USN-3270-1 |
| Ubuntu 14.04 LTS | openjdk-6 | 6b41-1.13.13-0ubuntu0.14.04.1 | — |
| Ubuntu 14.04 LTS | openjdk-7 | 7u121-2.6.8-1ubuntu0.14.04.3 | USN-3194-1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.20 | USN-3087-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.4.1-1jpp.2.el7 | RHSA-2017:0336 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.4.1-1jpp.2.el7 | RHSA-2017:0462 |
| RHEL 7 | openssl +4 | 1:1.0.1e-51.el7_2.7 | RHSA-2016:1940 |
| RHEL 7 | python +6 | 2.7.5-69.el7_5 | RHSA-2018:2123 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.41-1jpp.1.el6_8 | RHSA-2017:0338 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.4.1-1jpp.1.el6_8 | RHSA-2017:0336 |
| RHEL 6 | java-1.8.0-ibm +5 | 1:1.8.0.4.1-1jpp.1.el6_8 | RHSA-2017:0462 |
| RHEL 6 | openssl +3 | 1.0.1e-48.el6_8.3 | RHSA-2016:1940 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.41-1jpp.1.el5_11 | RHSA-2017:0338 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.10.1-1jpp.1.el5_11 | RHSA-2017:0337 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.7.1-ibm +1 | 1:1.7.1.4.1-1jpp.1.el6_8 | RHSA-2017:1216 |
| Red Hat JBoss Web Server 2 | httpd +4 | 2.2.26-57.ep6.el6 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | httpd22 +4 | 2.2.26-58.ep6.el7 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | jbcs-httpd24-openssl +4 | 1:1.0.2h-14.jbcs.el6 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | mod_cluster-native | 1.2.13-9.Final_redhat_2.ep6.el6 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | mod_ssl | 1:2.2.26-57.ep6.el6 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | mod_ssl22 | 1:2.2.26-58.ep6.el7 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | tomcat6 +10 | 6.0.41-19_patch_04.ep6.el6 | RHSA-2017:3113 |
| Red Hat JBoss Web Server 2 | tomcat7 +10 | 7.0.54-28_patch_05.ep6.el6 | RHSA-2017:3113 |
| Red Hat JBoss EAP 6 | httpd +4 | 2.2.26-57.ep6.el6 | RHSA-2017:3240 |
| Red Hat JBoss EAP 6 | httpd22 +4 | 2.2.26-58.ep6.el7 | RHSA-2017:3240 |
| Red Hat JBoss EAP 6 | jbcs-httpd24-openssl +4 | 1:1.0.2h-14.jbcs.el6 | RHSA-2017:3240 |
| Red Hat JBoss EAP 6 | mod_cluster-native | 1.2.13-9.Final_redhat_2.ep6.el6 | RHSA-2017:3240 |
| Red Hat JBoss EAP 6 | mod_ssl | 1:2.2.26-57.ep6.el6 | RHSA-2017:3240 |
| Red Hat JBoss EAP 6 | mod_ssl22 | 1:2.2.26-58.ep6.el7 | RHSA-2017:3240 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-httpd +7 | 2.4.23-122.jbcs.el6 | RHSA-2017:2710, RHSA-2017:2709 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_ssl +1 | 1:2.4.23-122.jbcs.el6 | RHSA-2017:2710, RHSA-2017:2709 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl +4 | 1:1.0.2h-14.jbcs.el6 | RHSA-2017:2710, RHSA-2017:2709 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES 12 SP2 | java-1_8_0-ibm | 1.8.0_sr4.0-23.1 | SUSE-SU-2017:0839-1, SUSE-SU-2017:0460-1 |
| SLES 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-20.1 | SUSE-SU-2017:0346-1 |
| SLES 12 SP1 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES 12 SP1 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES 12 SP1 | java-1_8_0-ibm | 1.8.0_sr4.0-23.1 | SUSE-SU-2017:0839-1, SUSE-SU-2017:0460-1 |
| SLES 12 SP1 | java-1_8_0-openjdk | 1.8.0.121-20.1 | SUSE-SU-2017:0346-1 |
| SLES 12 SP1 | openssl | 1.0.1i-52.1 | SUSE-SU-2016:2394-1 |
| SLES 12 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES 12 | java-1_6_0-ibm | 1.6.0_sr16.41-46.1 | SUSE-SU-2017:1389-1, SUSE-SU-2017:0726-1 |
| SLES 12 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES 12 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES 12 | nodejs4 | 4.6.0-8.1 | SUSE-SU-2016:2470-2, SUSE-SU-2016:2470-1 |
| SLES 12 | openssl | 1.0.1i-27.21.1 | SUSE-SU-2016:2387-1 |
| SLES 11 SP4 | MozillaFirefox | 68.2.0-78.51.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | MozillaFirefox-branding-SLED | 68-21.9.8 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-atk | 2.26.1-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-cairo | 1.15.10-2.13.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gdk-pixbuf | 2.36.11-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-glib2 | 2.54.3-2.14.7 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gtk3 | 3.10.9-2.15.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-harfbuzz | 1.7.5-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi | 3.2.1.git259-2.3.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-pango | 1.40.14-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.1-22.1 | SUSE-SU-2017:0719-1 |
| SLES 11 SP4 | mozilla-nspr | 4.21-29.6.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nss | 3.45-38.9.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES 11 SP3 | java-1_6_0-ibm | 1.6.0_sr16.45-84.1 | SUSE-SU-2017:1444-1 |
| SLES 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.1-61.1 | SUSE-SU-2017:0716-1 |
| SLES 11 SP3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP2 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES 11 | openssl1 | 1.0.1g-0.52.1 | SUSE-SU-2016:2469-1 |
| SUSE Studio Onsite 1.3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES for SAP 12 SP2 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES for SAP 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES for SAP 12 SP2 | java-1_8_0-ibm | 1.8.0_sr4.0-23.1 | SUSE-SU-2017:0839-1, SUSE-SU-2017:0460-1 |
| SLES for SAP 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-20.1 | SUSE-SU-2017:0346-1 |
| SLES for SAP 12 SP1 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES for SAP 12 SP1 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES for SAP 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES for SAP 12 SP1 | java-1_8_0-ibm | 1.8.0_sr4.0-23.1 | SUSE-SU-2017:0839-1, SUSE-SU-2017:0460-1 |
| SLES for SAP 12 SP1 | java-1_8_0-openjdk | 1.8.0.121-20.1 | SUSE-SU-2017:0346-1 |
| SLES for SAP 12 SP1 | openssl | 1.0.1i-52.1 | SUSE-SU-2016:2394-1 |
| SLES for SAP 12 | java-1_7_0-openjdk | 1.7.0.131-39.1 | SUSE-SU-2017:0490-1 |
| SLES for SAP 12 | java-1_7_1-ibm | 1.7.1_sr4.1-34.1 | SUSE-SU-2017:0720-1 |
| SLES for SAP 12 | openssl | 1.0.1i-27.21.1 | SUSE-SU-2016:2387-1 |
| SLES for SAP 11 SP4 | compat-openssl097g | 0.9.7g-146.22.47.1 | SUSE-SU-2016:2545-1 |
| SLES for SAP 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.1-22.1 | SUSE-SU-2017:0719-1 |
| SLES for SAP 11 SP4 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES for SAP 11 SP3 | compat-openssl097g | 0.9.7g-146.22.47.1 | SUSE-SU-2016:2545-1 |
| SUSE OpenStack Cloud 5 | java-1_7_0-ibm | 1.7.0_sr10.1-61.1 | SUSE-SU-2017:0716-1 |
| SUSE OpenStack Cloud 5 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Manager Proxy 2.1 | java-1_7_0-ibm | 1.7.0_sr10.1-61.1 | SUSE-SU-2017:0716-1 |
| SUSE Manager Proxy 2.1 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Manager 2.1 | java-1_7_0-ibm | 1.7.0_sr10.1-61.1 | SUSE-SU-2017:0716-1 |
| SUSE Manager 2.1 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_6_0-ibm | 1.6.0_sr16.45-84.1 | SUSE-SU-2017:1444-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.1-61.1 | SUSE-SU-2017:0716-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_8_0-openjdk | 1.8.0.302-2.2 | openSUSE-SU-2024:10876-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.8 | openssl | 1.0.2i-r0 | — |
| Alpine v3.7 | openssl | 1.0.2i-r0 | — |
| Alpine v3.6 | openssl | 1.0.2i-r0 | — |
| Alpine v3.5 | openssl | 1.0.2i-r0 | — |
| Alpine v3.4 | openssl | 1.0.2i-r0 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.3 | openssl | 1.0.2i-r0 | — |
| Alpine v3.2 | openssl | 1.0.2i-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
ZakyHermawan/Simple-Sweet32 ★ 0 · Dec 13, 2025
Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 46
- RHSA-2018:2123 Red Hat Security Advisory: python security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:3113 Red Hat Security Advisory: Red Hat JBoss Web Server security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:3240 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:2710 Red Hat Security Advisory: Red Hat JBoss Core Services security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:2709 Red Hat Security Advisory: Red Hat JBoss Core Services security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:1216 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:0338 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:0462 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:0337 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2016:1940 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2017:0336 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- USN-3270-1 nss vulnerabilities Ubuntu Security Notices (USN) · Jun 1, 2026
- USN-3194-1 openjdk-7 vulnerabilities Ubuntu Security Notices (USN) · Jun 1, 2026
- USN-3087-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Jun 1, 2026
- USN-3179-1 openjdk-8 vulnerabilities Ubuntu Security Notices (USN) · Jun 1, 2026
- ICSA-21-075-02 GE UR Family (Update A) CISA ICS & IT advisories · Apr 16, 2026
- openSUSE-SU-2024:10876-1 java-1_8_0-openjdk-1.8.0.302-2.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0726-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:1444-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2545-1 Security update for compat-openssl097g SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0460-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0490-1 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0346-1 Security update for java-1_8_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2458-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0839-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2469-1 Security update for openssl1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0716-1 Security update for java-1_7_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2468-1 Security update for compat-openssl098 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:1389-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0719-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2394-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2470-1 Security update for nodejs4 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2470-2 Security update for nodejs4 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0720-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14246-1 Security update for Mozilla Firefox SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2387-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2024-0209 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2022-1955 OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Apr 10, 2025
- WID-SEC-2024-0064 Juniper Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2025
- WID-SEC-2024-1277 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- ICSA-22-349-21 Siemens SCALANCE X-200RNA Switch Devices CISA ICS & IT advisories · Dec 13, 2022
- SSA-412672 SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 Siemens ProductCERT · Dec 13, 2022
- ICSA-22-160-01 Mitsubishi Electric Air Conditioning Systems CISA ICS & IT advisories · Jun 9, 2022
- ICSMA-18-058-02 Philips Intellispace Portal ISP Vulnerabilities CISA ICS & IT advisories · Feb 27, 2018
References
- RHSA-2017:3113 vendor-advisory
- RHSA-2017:0338 vendor-advisory
- https://www.tenable.com/security/tns-2016-20
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us
- GLSA-201612-16 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415
- RHSA-2017:3240 vendor-advisory
- https://www.tenable.com/security/tns-2016-16
- RHSA-2017:2709 vendor-advisory
- 92630 vdb-entry
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499
- https://www.tenable.com/security/tns-2016-21
- https://kc.mcafee.com/corporate/index?page=content&id=SB10171
- RHSA-2017:3239 vendor-advisory
- 42091 exploit
- GLSA-201701-65 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- 1036696 vdb-entry
- https://security.netapp.com/advisory/ntap-20160915-0001/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us
- GLSA-201707-01 vendor-advisory
- 95568 vdb-entry
- RHSA-2017:3114 vendor-advisory
- https://bto.bluecoat.com/security-advisory/sa133
- https://www.tenable.com/security/tns-2017-09
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116
- RHSA-2017:1216 vendor-advisory
- https://wiki.opendaylight.org/view/Security_Advisories
- RHSA-2017:2710 vendor-advisory
- https://security.netapp.com/advisory/ntap-20170119-0001/
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984
- [tls] 20091120 RC4+3DES rekeying - long-lived TLS connections mailing-list
- RHSA-2018:2123 vendor-advisory
- RHSA-2017:0337 vendor-advisory
- RHSA-2017:2708 vendor-advisory
- RHSA-2017:0336 vendor-advisory
- SUSE-SU-2016:2470 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
- RHSA-2017:0462 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- https://kc.mcafee.com/corporate/index?page=content&id=SB10215
- SUSE-SU-2017:2700 vendor-advisory
- 20170329 [security bulletin] HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilities mailing-list
- USN-3087-1 vendor-advisory
- SUSE-SU-2016:2469 vendor-advisory
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680
- openSUSE-SU-2016:2537 vendor-advisory
- 20161207 [security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information mailing-list
- USN-3087-2 vendor-advisory
- 20180510 [security bulletin] MFSBGN03805 - HP Service Manager, Remote Disclosure of Information mailing-list
- https://kc.mcafee.com/corporate/index?page=content&id=SB10197
- https://kc.mcafee.com/corporate/index?page=content&id=SB10186
- SUSE-SU-2017:2699 vendor-advisory
- 20170831 [security bulletin] HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information mailing-list
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849