CVE-2016-6329

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration…

published January 31, 2017

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05940 · 93.2th percentile
Published
2017-01-31T22:00Z
EPSS history
Timeline
  • 31 JAN 22:00Z
    OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration…
    cvelistv5