Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-54356

Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kyverno kyverno

Default version status: unaffected

  • 0 to < 1.9.5, 1.10.0affected
  • 1.9.5, 1.10.0unaffected
pkg:golang/github.com/kyverno/kyverno

References