Lucene search
HistoryFeb 08, 2013 - 7:55 p.m.
CVE-2013-1621
ssl
module
array index error
polarssl
denial of service
crafted padding-length
cve-2013-1621
6.4 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
80.0%
Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.
Related
ubuntucve
ubuntucve
prion
prion
Code injection
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
openvas
openvas
Fedora Update for polarssl FEDORA-2013-18251
2013-10-15 00:00:00
Fedora Update for polarssl FEDORA-2013-18251
2013-10-15 00:00:00
Debian Security Advisory DSA 2622-1 (polarssl - several vulnerabilities)
2013-02-13 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: polarssl-1.2.9-1.fc18
2013-10-14 17:17:04
[SECURITY] Fedora 18 Update: polarssl-1.2.9-1.fc18
2013-10-14 07:00:42
[SECURITY] Fedora 18 Update: polarssl-1.2.8-1.fc18
2013-09-20 16:27:34
debian
debian
[SECURITY] [DSA 2622-1] polarssl security update
2013-02-13 20:17:01
[SECURITY] [DSA 2621-1] openssl security update
2013-02-13 20:07:41
nessus
nessus
Debian DSA-2622-1 : polarssl - several vulnerabilities
2013-02-14 00:00:00
GLSA-201310-10 : PolarSSL: Multiple vulnerabilities
2013-10-18 00:00:00
IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.200 Information Disclosure
2014-08-11 00:00:00
securityvulns
securityvulns
osv
osv
polarssl - several
2013-02-13 00:00:00
CVE-2016-2107
2016-05-05 01:59:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
mageia
mageia
Updated polarssl package fixes security vulnerabilities
2013-09-25 01:41:53
gentoo
gentoo
PolarSSL: Multiple vulnerabilities
2013-10-17 00:00:00
ibm
ibm
veracode
veracode
Timing Attacks
2017-02-10 05:59:15
Timing Side- Channel Attack
2019-01-15 08:52:54
Padding Oracle Attack
2017-01-27 03:10:31
f5
f5
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2013-02-08 00:00:00
K15637 : GnuTLS vulnerability CVE-2013-2116
2014-10-16 00:00:00
slackware
slackware
openssl
2013-02-11 23:49:59
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
Vulnerability in OpenSSL CVE-2016-2107
2016-05-03 00:00:00
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
debiancve
debiancve
cve
cve
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
Security update for Java (important)
2013-02-22 20:04:33
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 17:04:41
centos
centos
java security update
2013-02-20 20:11:32
java security update
2013-02-20 20:33:43
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2013-02-20 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
amazon
amazon
Critical: openssl
2014-04-07 17:26:00
Important: java-1.6.0-openjdk
2013-03-02 16:50:00
redhat
redhat
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
(RHSA-2013:0274) Important: java-1.6.0-openjdk security update
2013-02-20 00:00:00
(RHSA-2013:0273) Critical: java-1.6.0-openjdk security update
2013-02-20 00:00:00
alpinelinux
alpinelinux
CVE-2018-0497
2018-07-28 17:29:00
CVE-2016-2107
2016-05-05 01:59:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:03.openssl
2013-04-02 00:00:00
github
github
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
aix
aix
Multiple OpenSSL vulnerabilities
2013-03-15 03:20:11
AIX OpenSSH Vulnerability
2013-04-08 15:19:58
ubuntu
ubuntu
OpenSSL vulnerability
2013-03-25 00:00:00
OpenSSL regression
2013-02-28 00:00:00
6.4 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
80.0%
Related for CVE-2013-1621