Lucene search

K
cvelistRedhatCVELIST:CVE-2013-0169
HistoryFeb 08, 2013 - 7:00 p.m.

CVE-2013-0169

2013-02-0819:00:00
redhat
www.cve.org
1

6.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the “Lucky Thirteen” issue.

References