| Package | Affected versions | Patched versions |
|---|---|---|
| content security management appliance | = 9.6.6-068= 9.7.0-006 | |
| node.js | ≥ 0.10.0, < 0.10.47≥ 0.12.0, < 0.12.16≥ 4.0.0, < 4.1.2≥ 4.2.0, < 4.6.0≥ 6.0.0, < 6.7.0 | 0.10.470.12.164.1.24.6.06.7.0 |
| openssl | = 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e= 1.0.1f= 1.0.1g= 1.0.1h= 1.0.1i= 1.0.1j= 1.0.1k= 1.0.1l= 1.0.1m= 1.0.1n= 1.0.1o= 1.0.1p= 1.0.1q= 1.0.1r= 1.0.1t= 1.0.2a= 1.0.2b= 1.0.2c= 1.0.2d= 1.0.2e= 1.0.2f= 1.0.2h | |
| database | = 11.2.0.4= 12.1.0.2 | |
| python | ≥ 2.7.0, < 2.7.13≥ 3.4.0, < 3.4.7≥ 3.5.0, < 3.5.3 | 2.7.133.4.73.5.3 |
| jboss enterprise application platform | = 6.0.0 | |
| jboss enterprise web server | = 1.0.0= 2.0.0 | |
| jboss web server | = 3.0 |
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free