Read the docs
TI-2016-01993 Aliases CVE-2016-2183GHSA-w2rw-pv8p-h9c8

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other…

Priority HIGH 83CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 45 fixed, 10 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-200.

Summary

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.94697 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial Red Hat: 20 advisoriesRed Hat: 45 fixed, 10 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*6.0.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*2.7.0 to before 2.7.13; 3.4.0 to before 3.4.7; 3.5.0 to before 3.5.3Vulnerablepython-pillow
cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:*9.6.6-068VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:*9.7.0-006VulnerableCisco
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions 2.7.0 to before 2.7.13; 3.4.0 to before 3.4.7; 3.5.0 to before 3.5.3 Vulnerable ·python-pillow
  • cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:*:*:*:*:*:*:* Versions 9.6.6-068 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:*:*:*:*:*:*:* Versions 9.7.0-006 Vulnerable ·Cisco
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*1.0.1aVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*1.0.1bVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*1.0.1cVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*1.0.1dVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*1.0.1eVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*1.0.1fVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*1.0.1gVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*1.0.1hVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*1.0.1iVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*1.0.1jVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*1.0.1kVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*1.0.1lVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*1.0.1mVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*1.0.1nVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*1.0.1oVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*1.0.1pVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*1.0.1qVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*1.0.1rVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*1.0.1tVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*1.0.2aVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*1.0.2bVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*1.0.2cVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*1.0.2dVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*1.0.2eVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*1.0.2fVulnerableOpenSSL
cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*1.0.2hVulnerableOpenSSL
cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*11.2.0.4VulnerableOracle
cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*12.1.0.2VulnerableOracle
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*0.10.0 to before 0.10.47; 0.12.0 to before 0.12.16VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*4.0.0 to before 4.1.2VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*4.2.0 to before 4.6.0VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*6.0.0 to before 6.7.0VulnerableNodeJS
  • cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* Versions 1.0.1a Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* Versions 1.0.1b Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* Versions 1.0.1c Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* Versions 1.0.1d Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* Versions 1.0.1e Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* Versions 1.0.1f Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* Versions 1.0.1g Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* Versions 1.0.1h Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* Versions 1.0.1i Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* Versions 1.0.1j Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:* Versions 1.0.1k Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:* Versions 1.0.1l Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:* Versions 1.0.1m Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:* Versions 1.0.1n Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:* Versions 1.0.1o Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:* Versions 1.0.1p Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:* Versions 1.0.1q Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:* Versions 1.0.1r Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:* Versions 1.0.1t Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:* Versions 1.0.2a Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:* Versions 1.0.2b Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:* Versions 1.0.2c Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:* Versions 1.0.2d Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:* Versions 1.0.2e Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:* Versions 1.0.2f Vulnerable ·OpenSSL
  • cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:* Versions 1.0.2h Vulnerable ·OpenSSL
  • cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:* Versions 11.2.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:* Versions 12.1.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:* Versions 0.10.0 to before 0.10.47; 0.12.0 to before 0.12.16 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 4.0.0 to before 4.1.2 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 4.2.0 to before 4.6.0 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 6.0.0 to before 6.7.0 Vulnerable ·NodeJS

Remediation

Red Hat 20 advisories

  • RHSA-2021:2438 Released 2021-07-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.8.2 bug fix and security update
    • Red Hat OpenShift Container Platform 4.8 openshift4/driver-toolkit-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47
  • RHSA-2021:0308 Released 2021-02-08 · Red Hat rating Important
    OpenShift Container Platform 4.6.16 security and bug fix update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-docker-builder, openshift4/ose-etcd, openshift4/ose-installer
  • RHSA-2020:3842 Released 2020-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.5.13 openshift-enterprise-console-container security update
    • Red Hat OpenShift Container Platform 4.5 openshift4/ose-console
Show 17 more Red Hat advisories
  • RHSA-2020:0451 Released 2020-02-19 · Red Hat rating Moderate
    OpenShift Container Platform 3.11 security update
    • Red Hat OpenShift Container Platform 3.11 openshift3/oauth-proxy
  • RHSA-2019:2859 Released 2019-09-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.1.18 security update
    • Red Hat OpenShift Container Platform 4.1 openshift4/ose-oauth-proxy
  • RHSA-2019:1245 Released 2019-05-20 · Red Hat rating Moderate
    Red Hat Quay 3.0.2 security and bug fix update
    • Red Hat Quay 3
  • RHSA-2018:2123 Released 2018-07-03 · Red Hat rating Moderate
    python security update
    • Red Hat Enterprise Linux Client (v. 7) python-2.7.5-69.el7_5, python-libs-2.7.5-69.el7_5
    • Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-69.el7_5, python-devel-2.7.5-69.el7_5, python-test-2.7.5-69.el7_5 +2
    • Red Hat Enterprise Linux ComputeNode (v. 7) python-2.7.5-69.el7_5, python-devel-2.7.5-69.el7_5, python-libs-2.7.5-69.el7_5
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-69.el7_5, python-test-2.7.5-69.el7_5, python-tools-2.7.5-69.el7_5 +1
    • Red Hat Enterprise Linux Server (v. 7) python-2.7.5-69.el7_5, python-devel-2.7.5-69.el7_5, python-libs-2.7.5-69.el7_5 +1
    • Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-69.el7_5, python-test-2.7.5-69.el7_5, python-tools-2.7.5-69.el7_5 +1
    • Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-69.el7_5, python-devel-2.7.5-69.el7_5, python-libs-2.7.5-69.el7_5
    • Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-69.el7_5, python-test-2.7.5-69.el7_5, python-tools-2.7.5-69.el7_5 +1
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) python-2.7.5-69.el7_5, python-devel-2.7.5-69.el7_5, python-libs-2.7.5-69.el7_5
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) python-debug-2.7.5-69.el7_5, python-test-2.7.5-69.el7_5, python-tools-2.7.5-69.el7_5 +1
  • RHSA-2017:3240 Released 2017-11-16 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 6.4.18 security update
    • Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server httpd-2.2.26-57.ep6.el6, httpd-2.2.26-57.ep6.el6.i386, httpd-devel-2.2.26-57.ep6.el6 +16
    • Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server httpd22-2.2.26-58.ep6.el7, httpd22-devel-2.2.26-58.ep6.el7, httpd22-manual-2.2.26-58.ep6.el7 +9
  • RHSA-2017:3239 Released 2017-11-16 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 6.4.18 security update
    • Red Hat JBoss Enterprise Application Platform 6.4
  • RHSA-2017:3113 Released 2017-11-02 · Red Hat rating Important
    Red Hat JBoss Web Server security and bug fix update
    • Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server httpd-2.2.26-57.ep6.el6, httpd-2.2.26-57.ep6.el6.i386, httpd-devel-2.2.26-57.ep6.el6 +38
    • Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server httpd22-2.2.26-58.ep6.el7, httpd22-devel-2.2.26-58.ep6.el7, httpd22-manual-2.2.26-58.ep6.el7 +31
  • RHSA-2017:3114 Released 2017-11-02 · Red Hat rating Important
    Red Hat JBoss Web Server security and bug fix update
    • Red Hat JBoss Web Server 2.1
  • RHSA-2017:2710 Released 2017-09-13 · Red Hat rating Important
    Red Hat JBoss Core Services security update
    • Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-httpd-2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-devel-2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-libs-2.4.23-122.jbcs.el6 +12
  • RHSA-2017:2709 Released 2017-09-13 · Red Hat rating Important
    Red Hat JBoss Core Services security update
    • Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd-2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-devel-2.4.23-122.jbcs.el7, jbcs-httpd24-httpd-libs-2.4.23-122.jbcs.el7 +12
  • RHSA-2017:2708 Released 2017-09-13 · Red Hat rating Important
    Red Hat JBoss Core Services security update
    • Red Hat JBoss Core Services
  • RHSA-2017:1216 Released 2017-05-09 · Red Hat rating Moderate
    java-1.7.1-ibm security update
    • Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8
    • Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8
  • RHSA-2017:0462 Released 2017-03-08 · Red Hat rating Moderate
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.1.el6_8 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.2.el7 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.1.el6_8, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.4.1-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.4.1-1jpp.2.el7 +3
  • RHSA-2017:0338 Released 2017-02-28 · Red Hat rating Critical
    java-1.6.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.i386, java-1.6.0-ibm-accessibility-1:1.6.0.16.41-1jpp.1.el5_11 +13
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.i386, java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el5_11.ppc +21
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-demo-1:1.6.0.16.41-1jpp.1.el6_8, java-1.6.0-ibm-devel-1:1.6.0.16.41-1jpp.1.el6_8 +4
  • RHSA-2017:0336 Released 2017-02-28 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.2.el7 +6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.1.el6_8, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.2.el7 +3
  • RHSA-2017:0337 Released 2017-02-28 · Red Hat rating Critical
    java-1.7.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11, java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11.i386, java-1.7.0-ibm-demo-1:1.7.0.10.1-1jpp.1.el5_11 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11, java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11.i386, java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11.ppc +15
  • RHSA-2016:1940 Released 2016-09-27 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-51.el7_2.7, openssl-libs-1:1.0.1e-51.el7_2.7
    • Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-51.el7_2.7, openssl-perl-1:1.0.1e-51.el7_2.7, openssl-static-1:1.0.1e-51.el7_2.7
    • Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-51.el7_2.7, openssl-libs-1:1.0.1e-51.el7_2.7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-51.el7_2.7, openssl-perl-1:1.0.1e-51.el7_2.7, openssl-static-1:1.0.1e-51.el7_2.7
    • Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-48.el6_8.3, openssl-perl-1.0.1e-48.el6_8.3, openssl-static-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-48.el6_8.3, openssl-perl-1.0.1e-48.el6_8.3, openssl-static-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-48.el6_8.3, openssl-1.0.1e-48.el6_8.3.ppc, openssl-devel-1.0.1e-48.el6_8.3 +1
    • Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-51.el7_2.7, openssl-devel-1:1.0.1e-51.el7_2.7, openssl-devel-1:1.0.1e-51.el7_2.7.ppc +2
    • Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-48.el6_8.3, openssl-static-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-51.el7_2.7, openssl-static-1:1.0.1e-51.el7_2.7, openssl-static-1:1.0.1e-51.el7_2.7.ppc
    • Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-48.el6_8.3, openssl-devel-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-51.el7_2.7, openssl-devel-1:1.0.1e-51.el7_2.7, openssl-libs-1:1.0.1e-51.el7_2.7
    • Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-48.el6_8.3, openssl-static-1.0.1e-48.el6_8.3
    • Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-51.el7_2.7, openssl-static-1:1.0.1e-51.el7_2.7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Web Server 1AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Web Server 3AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 11 (Ocata)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 8 (Liberty)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2017:0336, RHSA-2017:0462
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2017:0336, RHSA-2017:0462
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2017:0337, RHSA-2017:0338
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2017:0336, RHSA-2017:0338, RHSA-2017:0462
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2017:0336, RHSA-2017:0338, RHSA-2017:0462
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2017:0337, RHSA-2017:0338
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2017:0336, RHSA-2017:0338, RHSA-2017:0462
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2017:0336, RHSA-2017:0462
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:1940
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2016:1940, RHSA-2018:2123
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2017:0336, RHSA-2017:0338, RHSA-2017:0462
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2017:0336, RHSA-2017:0462
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:2123
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:2123
Red Hat JBoss Core ServicesFixed RHSA-2017:2708
Red Hat JBoss Core Services on RHEL 6 ServerFixed RHSA-2017:2710
Red Hat JBoss Core Services on RHEL 7 ServerFixed RHSA-2017:2709
Red Hat JBoss Enterprise Application Platform 6.4Fixed RHSA-2017:3239
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 ServerFixed RHSA-2017:3240
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 ServerFixed RHSA-2017:3240
Red Hat JBoss Enterprise Web Server 2 for RHEL 6 ServerFixed RHSA-2017:3113
Red Hat JBoss Enterprise Web Server 2 for RHEL 7 ServerFixed RHSA-2017:3113
Red Hat JBoss Web Server 2.1Fixed RHSA-2017:3114
Red Hat OpenShift Container Platform 3.11Fixed RHSA-2020:0451
Red Hat OpenShift Container Platform 4.1Fixed RHSA-2019:2859
Red Hat OpenShift Container Platform 4.5Fixed RHSA-2020:3842
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2021:0308
Red Hat OpenShift Container Platform 4.8Fixed RHSA-2021:2438
Red Hat Quay 3Fixed RHSA-2019:1245
Red Hat Satellite 5.6 (RHEL v.6)Fixed RHSA-2017:1216
Red Hat Satellite 5.7 (RHEL v.6)Fixed RHSA-2017:1216
Not affected: 6 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.6
  • Red Hat OpenShift Container Platform 4.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-2183
  2. 2026-10-03 Alias added: GHSA-w2rw-pv8p-h9c8

References

Exploit 1

Patch 6

Advisory 115

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences