CVE-2016-6329
MEDIUMOpenVPN < 2.3.14 - Exposure of Sensitive Information via Birthday Attack on 64-bit Block Ciphers
Title source: llmDescription
OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.
References (10)
Core 10
Core References
Technical Description, Third Party Advisory x_refsource_misc
https://sweet32.info/
Third Party Advisory x_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036695
Third Party Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21995039
Third Party Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21991482
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201611-02
Vendor Advisory x_refsource_confirm
https://community.openvpn.net/openvpn/wiki/SWEET32
Permissions Required, Third Party Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92631
Vendor Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf
Scores
CVSS v3
5.9
EPSS
0.0594
EPSS Percentile
92.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
CWE-310
Status
published
Products (1)
openvpn/openvpn
< 2.3.14
Published
Jan 31, 2017
Tracked Since
Feb 18, 2026