CVE-2016-2183
HighPublic exploitSSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
Published Jun 10, 2022 · Updated Oct 16, 2026 · Also known as ALPINE-CVE-2016-2183, PSF-2016-4, SUSE-SU-2017:0346-1, SUSE-SU-2017:0460-1, SUSE-SU-2017:0490-1, SUSE-SU-2017:0716-1, SUSE-SU-2017:0719-1, SUSE-SU-2017:0720-1, SUSE-SU-2017:0726-1, SUSE-SU-2017:0839-1, SUSE-SU-2017:1389-1, SUSE-SU-2017:1444-1, UBUNTU-CVE-2016-2183, USN-3179-1, USN-3194-1, USN-3270-1
Key Facts
Patch immediately- CVE-2016-2183 is a high-severity vulnerability (CVSS 7.5 v3.1) affecting Content Security Management Appliance (Cisco), Node.js (Nodejs), Openssl and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 95% probability of exploitation in the next 30 days.
- Fixed versions are available, including compat-openssl097g 0.9.7g-146.22.47.1, compat-openssl097g-32bit 0.9.7g-146.22.47.1, compat-openssl098 0.9.8j-102.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (30-day exploit likelihood)
95%
Higher than 99.8% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2016-2183 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
Affected Products
693 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Content Security Management ApplianceCisco | 9.6.6-068, 9.7.0-006 | n/a |
| Node.jsNodejs | See advisory | 0.10.47 |
| OpensslOpenssl | 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1f, 1.0.1g, 1.0.1h | 1.0.2.i-1 |
| DatabaseOracle | 11.2.0.4, 12.1.0.2 | n/a |
| PythonPython | See advisory | 2.7.13 |
Patched Releases
compat-openssl097g
0.9.7g-146.22.47.1
compat-openssl097g-32bit
0.9.7g-146.22.47.1
compat-openssl098
0.9.8j-102.1, 0.9.8j-15.1
firefox-atk
2.26.1-2.8.4
firefox-atk-lang
2.26.1-2.8.4
firefox-cairo
1.15.10-2.13.4
firefox-gdk-pixbuf
2.36.11-2.8.4
firefox-gdk-pixbuf-lang
2.36.11-2.8.4
firefox-gdk-pixbuf-query-loaders
2.36.11-2.8.4
firefox-gdk-pixbuf-thumbnailer
2.36.11-2.8.4
firefox-gio-branding-upstream
2.54.3-2.14.7
firefox-glib2
2.54.3-2.14.7
firefox-glib2-lang
2.54.3-2.14.7
firefox-glib2-tools
2.54.3-2.14.7
firefox-gtk3
3.10.9-2.15.3
firefox-gtk3-branding-upstream
3.10.9-2.15.3
firefox-gtk3-data
3.10.9-2.15.3
firefox-gtk3-immodule-amharic
3.10.9-2.15.3
firefox-gtk3-immodule-inuktitut
3.10.9-2.15.3
firefox-gtk3-immodule-multipress
3.10.9-2.15.3
firefox-gtk3-immodule-thai
3.10.9-2.15.3
firefox-gtk3-immodule-vietnamese
3.10.9-2.15.3
firefox-gtk3-immodule-xim
3.10.9-2.15.3
firefox-gtk3-immodules-tigrigna
3.10.9-2.15.3
firefox-gtk3-lang
3.10.9-2.15.3
Timeline
Publicly disclosed
Jun 10, 2022
Last updated
Oct 16, 2026
Weakness Type
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm
References
- advisoryhttp://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/5d2bb853ae31
- advisoryhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- advisorySUSE-SU-2016:2387
- advisoryopenSUSE-SU-2016:2391
- advisorySUSE-SU-2016:2394
FAQ
Common Questions.
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated…
Affected: Content Security Management Appliance (Cisco) versions 9.6.6-068, 9.7.0-006; Node.js (Nodejs); Openssl versions 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1f, 1.0.1g, 1.0.1h, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including compat-openssl097g 0.9.7g-146.22.47.1, compat-openssl097g-32bit 0.9.7g-146.22.47.1, compat-openssl098 0.9.8j-102.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2016-2183 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo