CVE-2016-6329

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697Permissions Required, Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21991482Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21995039Third Party Advisory
http://www.securityfocus.com/bid/92631Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036695Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf
https://community.openvpn.net/openvpn/wiki/SWEET32Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403Third Party Advisory
https://security.gentoo.org/glsa/201611-02Third Party Advisory
https://sweet32.info/Technical Description, Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697Permissions Required, Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21991482Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21995039Third Party Advisory
http://www.securityfocus.com/bid/92631Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036695Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf
https://community.openvpn.net/openvpn/wiki/SWEET32Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403Third Party Advisory
https://security.gentoo.org/glsa/201611-02Third Party Advisory
https://sweet32.info/Technical Description, Third Party Advisory

Timeline

Published: Jan 31, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-63309.8The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows CVE-2016-63317.5ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title re CVE-2016-63327.5MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers t CVE-2016-63336.1Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27 CVE-2016-63346.1Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and CVE-2016-63357.5MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which CVE-2016-63366.5MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypa CVE-2016-63377.5MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserG CVE-2016-63386.8ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proxi CVE-2016-63408.4The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for at CVE-2016-63415.5oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sens CVE-2016-63427.5elog 3.1.1 allows remote attackers to post data as any username in the logbook.