REDHAT-BUG-1369383: Medium severity ncipher vulnerability
Ciphers with 64-bit block sizes used in CBC mode were found to be vulnerable to birthday attack when key renegotiation doesn't happen frequently or at all in long running connections. 3DES cipher as used in TLS protocol is vulnerable to this attack, that allows remote attacker to recover partial plaintext information (XOR of two plaintext blocks).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability associated with REDHAT-BUG-1369383?
REDHAT-BUG-1369383 pertains to ciphers with 64-bit block sizes used in CBC mode that are vulnerable to birthday attacks, particularly affecting the 3DES cipher in TLS.
What is the impact of REDHAT-BUG-1369383 on systems using 3DES cipher?
The impact of REDHAT-BUG-1369383 is that it allows remote attackers to recover partial plaintexts from encrypted communications under certain conditions.
How do I secure systems affected by REDHAT-BUG-1369383?
To secure systems affected by REDHAT-BUG-1369383, it is recommended to disable the 3DES cipher and migrate to stronger ciphers with larger block sizes.
Are there any known exploits for REDHAT-BUG-1369383?
As of now, there are no publicly known exploits specifically targeting REDHAT-BUG-1369383, but the vulnerability itself poses a significant risk if not addressed.
What systems are at risk due to REDHAT-BUG-1369383?
Systems utilizing the 3DES cipher in TLS are at risk due to the vulnerabilities described in REDHAT-BUG-1369383.