5

I wonder how vulnerable are Sweet32 and Lucky13? I mean, how often do the attackers use these vulnerabilities to gain access?

1 Answer 1

2

Lucky13 and Sweet32 are both attacks on SSL/TLS, i.e. these attacks can be used to intercept the encrypted connection between the client and the server. In the case of a server that is vulnerably to Lucky13, an active attacker may be able to launch a MITM attack by exploiting this vulnerability. The same applies to Sweet32, but even a passive attacker may be able to decrypt the encrypted data if they are able to collect enough data. However, neither attack can be used to gain access to the server.

2
  • How do I fix these vulnerabilities on debian?
    – rubo77
    May 5, 2020 at 0:23
  • @rubo77 Remove CBC cipher support from your webserver SSL ciphers. Oct 23, 2021 at 1:14

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .