CVE

Id
93149  
CVE No.
CVE-2016-6329  
Status
Candidate  
Description
OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792915 93149 CVE-2016-6329 MISC:https://sweet32.info/  View
792916 93149 CVE-2016-6329 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697  View
792917 93149 CVE-2016-6329 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21991482  View
792918 93149 CVE-2016-6329 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039  View
792919 93149 CVE-2016-6329 CONFIRM:https://community.openvpn.net/openvpn/wiki/SWEET32  View
792920 93149 CVE-2016-6329 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403  View
792921 93149 CVE-2016-6329 GENTOO:GLSA-201611-02  View
792922 93149 CVE-2016-6329 URL:https://security.gentoo.org/glsa/201611-02  View
792923 93149 CVE-2016-6329 BID:92631  View
792924 93149 CVE-2016-6329 URL:http://www.securityfocus.com/bid/92631  View
792925 93149 CVE-2016-6329 SECTRACK:1036695  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4029 JVNDB-2016-004802 EMC ViPR SRM におけるクロスサイトリクエストフォージェリの脆弱性 EMC ViPR SRM には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2016-6642 93149 5.8 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004802.html  View