https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:12:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04216 bdu:2019-04216 https://cve.radiocsirt.org/vuln/bdu:2019-04216 https://cve.radiocsirt.org/vuln/certfr-2019-avi-311 certfr-2019-avi-311 https://cve.radiocsirt.org/vuln/certfr-2019-avi-311 https://cve.radiocsirt.org/vuln/cnvd-2016-06784 cnvd-2016-06784 https://cve.radiocsirt.org/vuln/cnvd-2016-06784 https://cve.radiocsirt.org/vuln/euvd-2026-85756 EUVD-2026-85756 https://cve.radiocsirt.org/vuln/euvd-2026-85756 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6329 <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-6329 https://cve.radiocsirt.org/vuln/ghsa-w6pr-cm6j-f384 <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-w6pr-cm6j-f384 https://cve.radiocsirt.org/vuln/gsd-2016-6329 gsd-2016-6329 https://cve.radiocsirt.org/vuln/gsd-2016-6329 https://cve.radiocsirt.org/vuln/icsa-19-192-04 <p>The SSL protocol encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses e.g. the HTML5 WebSocket API, the Java URLConnection API, or the Silverlight WebClient API, aka a &#34;BEAST&#34; attack. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the device. TLS, when used with a 64-bit block cipher, could allow remote attackers to obtain cleartext data by leveraging a birthday attack against a long-duration encrypted session, aka a &#34;Sweet32&#34; attack. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the device. TLS and DTLS versions 1.1 and 1.2, as used in the affected product, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the &#34;Lucky Thirteen&#34;…</p> <p>The SSL protocol encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses e.g. the HTML5 WebSocket API, the Java URLConnection API, or the Silverlight WebClient API, aka a &#34;BEAST&#34; attack. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the device. TLS, when used with a 64-bit block cipher, could allow remote attackers to obtain cleartext data by leveraging a birthday attack against a long-duration encrypted session, aka a &#34;Sweet32&#34; attack. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the device. TLS and DTLS versions 1.1 and 1.2, as used in the affected product, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the &#34;Lucky Thirteen&#34;…</p> https://cve.radiocsirt.org/vuln/icsa-19-192-04 https://cve.radiocsirt.org/vuln/suse-su-2017:1622-1 <p>Security update for openvpn</p> <p>Security update for openvpn</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1622-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6329 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openvpn, Ubuntu:16.04:LTS: openvpn</p> <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openvpn, Ubuntu:16.04:LTS: openvpn</p> <p>OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a &#34;Sweet32&#34; attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6329