The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory21 | — | — | Dec 19, 2016 | Aug 31, 2016 |
| Aix 6.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Aug 31, 2016 |
| Aix 7.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Aug 31, 2016 |
| Aix 7.2 Openssl_advisory21 | — | — | Dec 19, 2016 | Aug 31, 2016 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Sep 1, 2016 |
| Amazon_linux | — | Upgrade opensslUpgrade java-1.8.0-openjdk | Oct 13, 2016 | Aug 31, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 1, 2016 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.20 (JDK 8u121, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.17 (JDK 7u131, quarterly CPU) — Azul Legacy Production Support | Sep 1, 2016 | Sep 1, 2016 |
| Centos_linux | — | Upgrade python-libsUpgrade python-testUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-develUpgrade java-1.7.0-ibm-srcUpgrade java-1.7.1-ibm-demoUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.7.0-ibm-pluginUpgrade java-1.7.0-ibm-develUpgrade java-1.8.0-ibm-pluginUpgrade python-toolsUpgrade java-1.7.0-ibm-jdbcUpgrade tkinterUpgrade java-1.6.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade python-develUpgrade java-1.6.0-ibm-javacommUpgrade java-1.7.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.6.0-ibm-develUpgrade java-1.6.0-ibmUpgrade java-1.7.0-ibmUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-demoUpgrade java-1.6.0-ibm-accessibilityUpgrade pythonUpgrade python-debuginfoUpgrade java-1.6.0-ibm-pluginUpgrade python-debugUpgrade java-1.6.0-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm | Jul 17, 2018 | Aug 31, 2016 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | Sep 1, 2016 |
| Cisco Asa | — | Upgrade to Cisco ASA version 9.1(7.12)Upgrade to Cisco ASA version 9.7(0.99)Upgrade to Cisco ASA version 9.6(2.9)Upgrade to Cisco ASA version 9.4(3.103) | Feb 9, 2017 | Aug 31, 2016 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Sep 1, 2016 |
| Debian | — | Upgrade openssl | Sep 22, 2016 | Aug 31, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 4, 2016 |
| Freebsd | — | Upgrade opensslUpgrade openssl-develUpgrade linux-c6-opensslUpgrade FreeBSD | Nov 14, 2016 | Sep 22, 2016 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-libs/openssl.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Aug 31, 2016 |
| Hp Ilo | — | Upgrade HP iLO 4 to version 2.50 | Aug 1, 2018 | Aug 31, 2016 |
| Hpux | — | Update hpuxws24APACHE.AUTH_LDAP to the latest versionUpdate hpuxws24APACHE.APACHE to the latest versionUpdate hpuxws24APACHE.WEBPROXY to the latest versionUpdate hpuxws24APACHE.MOD_PERL2 to the latest versionUpdate hpuxws24APACHE.MOD_JK to the latest versionUpdate hpuxws24APACHE.APACHE2 to the latest versionUpdate hpuxws24APACHE.WEBPROXY2 to the latest versionUpdate hpuxws24APACHE.AUTH_LDAP2 to the latest versionUpdate hpuxws24APACHE.MOD_JK2 to the latest versionUpdate hpuxws24APACHE.MOD_PERL to the latest version | Aug 11, 2017 | Aug 31, 2016 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Sep 1, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade pythonUpgrade python-libsUpgrade python-devel | Nov 30, 2017 | Aug 31, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl098e | Dec 4, 2019 | Sep 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl098e | Dec 18, 2019 | Sep 1, 2016 |
| Huawei Vrp | — | Contact Huawei TAC to request the upgrades | Apr 2, 2026 | Mar 22, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory21Apply the fix or workaround for java_jan2017_advisory | Nov 6, 2017 | Aug 31, 2016 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.0.0.15 or laterApply IBM HTTP Server version 8.5.5.13 or laterApply IBM HTTP Server version 9.0.0.6 or laterApply IBM HTTP Server Interim Fix PI84868 | Jun 22, 2018 | Aug 31, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 6.1.8.41Upgrade IBM Java to version 6.0.16.41Upgrade IBM Java to version 7.0.10.1Upgrade IBM Java to version 8.0.4.1Upgrade IBM Java to version 7.1.4.1 | Oct 5, 2018 | Sep 1, 2016 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Sep 1, 2016 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 18, 2017 | Aug 31, 2016 |
| Oracle Missing Cpu Jul 2017 | — | Apply the July 2017 Critical Patch Update (CPU) for Oracle Database | Jul 19, 2017 | Aug 31, 2016 |
| Oracle Solaris | — | Upgrade database/mysql-55/client to version 5.5.54-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-56/client to version 5.6.35-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-55/library to version 5.5.54-0.175.3.19.0.2.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.3.13.0.4.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.35-0.175.3.19.0.2.0 on Solaris 11.3Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57 to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.54-0.175.3.19.0.2.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.1.21-0.175.3.13.0.4.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.35-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.35-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57/client to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55/tests to version 5.5.54-0.175.3.19.0.2.0 on Solaris 11.3 | May 29, 2017 | Aug 31, 2016 |
| Oracle_linux | — | Upgrade opensslUpgrade python-debugUpgrade pythonUpgrade python-libsUpgrade openssl-develUpgrade python-testUpgrade python-develUpgrade tkinterUpgrade python-toolsUpgrade openssl-perl | Sep 27, 2016 | Aug 24, 2016 |
| Progress Moveit Transfer | — | Upgrade Progress MOVEit Transfer to the latest version | Nov 26, 2025 | Apr 16, 2020 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R11Update Pulse Connect Secure to version 8.2R6Update Pulse Connect Secure to version 8.1R11.1 | Oct 28, 2020 | Sep 1, 2016 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 24, 2016 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Sep 1, 2016 |
| Redhat Openshift | — | Upgrade golang-github-openshift-oauth | Oct 8, 2019 | Sep 1, 2016 |
| Redhat_linux | — | Upgrade java-1.7.1-ibmUpgrade java-1.7.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.0-ibm-jdbcUpgrade java-1.7.0-ibm-srcUpgrade java-1.6.0-ibmNo solution existsUpgrade java-1.6.0-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.0-ibmUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-develUpgrade java-1.6.0-ibm-demoUpgrade java-1.8.0-ibmUpgrade java-1.6.0-ibm-pluginUpgrade java-1.6.0-ibm-develUpgrade tkinterUpgrade java-1.6.0-ibm-jdbcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.0-ibm-demoUpgrade java-1.6.0-ibm-javacommUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade python-debuginfoUpgrade python-testUpgrade pythonUpgrade java-1.7.1-ibm-pluginUpgrade python-libsUpgrade python-toolsUpgrade python-develUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.0-ibm-pluginUpgrade java-1.6.0-ibm-accessibilityUpgrade python-debug | Mar 2, 2017 | Aug 31, 2016 |
| Suse | — | Upgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade firefox-gdk-pixbuf-langUpgrade java-1_8_0-openjdk-demoUpgrade java-1_7_0-ibmUpgrade openssl1Upgrade firefox-glib2-langUpgrade java-1_7_0-ibm-jdbcUpgrade libopenssl10Upgrade libfirefox-gobject-2_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade firefox-atk-langUpgrade libfreebl3Upgrade openssl-1_0_0-docUpgrade MozillaFirefox-translations-commonUpgrade firefox-libharfbuzz0Upgrade nodejs4Upgrade java-1_8_0-ibm-pluginUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade libopenssl1_0_0-x86Upgrade libopenssl1_1-hmacUpgrade libwsman3Upgrade firefox-gtk3-immodule-multipressUpgrade java-1_7_1-ibm-jdbcUpgrade firefox-gtk3-immodule-ximUpgrade libopenssl-devel-32bitUpgrade openssl-1_1Upgrade firefox-libgtk-3-0Upgrade java-1_7_0-openjdk-develUpgrade libfirefox-gmodule-2_0-0Upgrade libopenssl-1_1-develUpgrade firefox-gdk-pixbuf-query-loadersUpgrade java-1_6_0-ibm-fontsUpgrade firefox-libffi4Upgrade java-1_6_0-ibmUpgrade compat-openssl097g-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-toolsUpgrade nodejs4-docsUpgrade compat-openssl097gUpgrade npm8Upgrade firefox-gtk3-immodules-tigrignaUpgrade java-1_7_0-openjdk-headlessUpgrade firefox-libcairo2Upgrade firefox-gtk3-dataUpgrade java-1_7_1-ibm-pluginUpgrade mozilla-nsprUpgrade java-1_7_1-ibm-develUpgrade firefox-libffi7Upgrade java-1_8_0-ibm-develUpgrade libopenssl0_9_8-hmacUpgrade firefox-libcairo-gobject2Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl-1_0_0-develUpgrade mozilla-nss-develUpgrade java-1_8_0-ibm-alsaUpgrade libopenssl1_1Upgrade mozilla-nss-toolsUpgrade nodejs8-docsUpgrade java-1_6_0-ibm-jdbcUpgrade libwsman-develUpgrade java-1_7_1-ibmUpgrade libopenssl0_9_8-32bitUpgrade libopenssl1_0_0-32bitUpgrade sles12sp1-docker-imageUpgrade nodejs4-develUpgrade mozilla-nss-certs-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade libopenssl0_9_8Upgrade java-1_6_0-ibm-develUpgrade java-1_7_0-ibm-develUpgrade libopenssl0_9_8-x86Upgrade libopenssl-develUpgrade opensslUpgrade firefox-gtk3-immodule-amharicUpgrade java-1_7_0-openjdk-demoUpgrade openssl-docUpgrade java-1_7_0-openjdkUpgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-ibm-pluginUpgrade libsoftokn3Upgrade java-1_7_0-ibm-pluginUpgrade openwsman-serverUpgrade libopenssl1_1-32bitUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-langUpgrade sles12-docker-imageUpgrade java-1_7_0-ibm-alsaUpgrade java-1_8_0-ibmUpgrade firefox-gtk3-immodule-vietnameseUpgrade libopenssl1_0_0Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1-develUpgrade openssl-1_0_0Upgrade npm4Upgrade MozillaFirefoxUpgrade mozilla-nspr-32bitUpgrade java-1_8_0-openjdkUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certsUpgrade java-1_8_0-openjdk-develUpgrade libopenssl1_1-hmac-32bitUpgrade firefox-libpango-1_0-0Upgrade nodejs8Upgrade libopenssl1_0_0-hmac-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-thaiUpgrade nodejs8-develUpgrade java-1_8_0-openjdk-headlessUpgrade libfirefox-glib-2_0-0Upgrade java-1_7_1-ibm-alsaUpgrade libopenssl1_0_0-hmacUpgrade openssl1-docUpgrade firefox-glib2-tools | Sep 27, 2016 | Aug 31, 2016 |
| Ubuntu | — | Upgrade openjdk-6-jre-headlessUpgrade openjdk-6-jreUpgrade openjdk-7-jdkUpgrade libnss3Upgrade libssl1.0.0Upgrade openjdk-7-jreUpgrade openjdk-8-jdk-headlessUpgrade icedtea-6-jre-jamvmUpgrade openjdk-8-jreUpgrade openjdk-8-jre-headlessUpgrade icedtea-6-jre-cacaoUpgrade openjdk-8-jre-jamvmUpgrade openjdk-6-jre-zeroUpgrade openjdk-8-jdkUpgrade openjdk-6-jdkUpgrade icedtea-7-jre-jamvmUpgrade openjdk-8-jre-zeroUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-headless | Sep 22, 2016 | Aug 31, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub