{"id":"UBUNTU-CVE-2016-6329","details":"OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a \"Sweet32\" attack.","modified":"2026-02-04T04:16:52.306520Z","published":"2017-01-31T00:00:00Z","related":["USN-3339-1"],"upstream":["CVE-2016-6329"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2016-6329"},{"type":"REPORT","url":"https://community.openvpn.net/openvpn/wiki/SWEET32"},{"type":"REPORT","url":"https://sweet32.info/"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-3339-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2016-6329"}],"affected":[{"package":{"name":"openvpn","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/openvpn@2.3.2-7ubuntu3.2?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-7ubuntu3.2"}]}],"versions":["2.3.2-4ubuntu1","2.3.2-5ubuntu1","2.3.2-7ubuntu1","2.3.2-7ubuntu2","2.3.2-7ubuntu3","2.3.2-7ubuntu3.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openvpn","binary_version":"2.3.2-7ubuntu3.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-6329.json"}},{"package":{"name":"openvpn","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/openvpn@2.3.10-1ubuntu2.1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10-1ubuntu2.1"}]}],"versions":["2.3.7-1ubuntu1","2.3.7-2ubuntu1","2.3.8-1ubuntu1","2.3.10-1ubuntu1","2.3.10-1ubuntu2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openvpn","binary_version":"2.3.10-1ubuntu2.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-6329.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"low"}]}