Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1620
HistoryFeb 08, 2013 - 7:55 p.m.

CVE-2013-1620

2013-02-0819:55:00
CWE-203
[email protected]
web.nvd.nist.gov
44
cve-2013-1620
mozilla
network security
nss
tls
timing side-channel attacks
mac check operation
cbc padding
remote attackers
statistical analysis
crafted packets
plaintext-recovery attacks
nvd

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.7%

JSON

The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

References

Related

debiancve 3
prion 5
nessus 47
f5 6
ubuntucve 4
openvas 57
securityvulns 5
fedora 11
ubuntu 1
amazon 4
centos 5
redhat 4
veracode 7
oraclelinux 3
ibm 22
slackware 1
openssl 1
hackerone 1
cve 2
gentoo 1
suse 2
altlinux 4
osv 2
freebsd 1
debiancve
debiancve
CVE-2013-1620
2013-02-08 19:55:00
CVE-2013-0169
2013-02-08 19:55:00
CVE-2013-1624
2013-02-08 19:55:00
prion
prion
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
nessus
nessus
F5 Networks BIG-IP : TLS in Mozilla NSS vulnerability (K15630)
2014-10-10 00:00:00
Oracle Solaris Third-Party Patch Update : nss (cve_2013_1620_lucky_thirteen)
2015-01-19 00:00:00
Fedora 17 : nspr-4.9.5-2.fc17 / nss-3.14.3-1.fc17 / nss-softokn-3.14.3-1.fc17 / etc (2013-3079)
2013-03-14 00:00:00
f5
f5
SOL15630 - TLS in Mozilla NSS vulnerability CVE-2013-1620
2014-09-25 00:00:00
K15630 : TLS in Mozilla NSS vulnerability CVE-2013-1620
2015-09-17 00:00:00
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
ubuntucve
ubuntucve
CVE-2013-1620
2013-02-08 00:00:00
CVE-2013-0169
2013-02-08 00:00:00
CVE-2013-1619
2013-02-08 00:00:00
openvas
openvas
Fedora Update for nss-util FEDORA-2013-3079
2013-03-15 00:00:00
Fedora Update for nss FEDORA-2013-3079
2013-03-15 00:00:00
Fedora Update for nspr FEDORA-2013-3079
2013-03-15 00:00:00
securityvulns
securityvulns
Mozilla NSS library TLS timing attacks
2013-03-24 00:00:00
[USN-1763-1] NSS vulnerability
2013-03-24 00:00:00
ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nss-util-3.14.3-1.fc18
2013-02-28 07:04:40
[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17
2013-03-14 02:40:31
[SECURITY] Fedora 18 Update: nspr-4.9.5-2.fc18
2013-02-28 07:04:40
ubuntu
ubuntu
NSS vulnerability
2013-03-14 00:00:00
amazon
amazon
Medium: nss
2013-08-07 21:23:00
Medium: nspr
2013-08-07 21:23:00
Important: nss
2013-12-17 21:31:00
centos
centos
nspr, nss security update
2013-08-05 19:56:06
nspr, nss security update
2013-08-07 22:22:50
nspr, nss security update
2013-12-13 00:04:31
redhat
redhat
(RHSA-2013:1135) Moderate: nss and nspr security, bug fix, and enhancement update
2013-08-05 00:00:00
(RHSA-2013:1144) Moderate: nss, nss-util, nss-softokn, and nspr security update
2013-08-07 00:00:00
(RHSA-2013:1829) Important: nss, nspr, and nss-util security update
2013-12-12 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 08:52:48
Timing Side-Channel
2019-05-02 04:48:16
Timing Attacks
2017-02-10 05:59:15
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2013-08-05 00:00:00
nss, nss-util, nss-softokn, and nspr security update
2013-08-07 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
ibm
ibm
Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-0169)
2018-06-17 04:48:04
Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Express for the Oracle CPU April 2013.
2022-09-25 21:06:56
Security Bulletin: Rational Build Forge Security Advisory (CVE-2013-0169)
2018-06-17 04:47:31
slackware
slackware
openssl
2013-02-11 23:49:59
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
cve
cve
CVE-2013-0169
2013-02-08 19:55:00
CVE-2013-1623
2013-02-08 19:55:00
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2014-06-21 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
Security update for Java (important)
2013-02-22 20:04:33
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
osv
osv
CVE-2016-2107
2016-05-05 01:59:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00

6.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.7%

JSON
Related for CVE-2013-1620
debiancve3prion5nessus47f56ubuntucve4openvas57securityvulns5fedora11ubuntu1amazon4centos5redhat4veracode7oraclelinux3ibm22slackware1openssl1hackerone1cve2gentoo1suse2altlinux4osv2freebsd1