Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-1620HistoryFeb 08, 2013 - 7:55 p.m.
CVE-2013-1620
2013-02-0819:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.6%
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nss | < 2:3.14.3-1 | nss_2:3.14.3-1_all.deb |
| Debian | 11 | all | nss | < 2:3.14.3-1 | nss_2:3.14.3-1_all.deb |
| Debian | 10 | all | nss | < 2:3.14.3-1 | nss_2:3.14.3-1_all.deb |
| Debian | 999 | all | nss | < 2:3.14.3-1 | nss_2:3.14.3-1_all.deb |
| Debian | 13 | all | nss | < 2:3.14.3-1 | nss_2:3.14.3-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
cve
cve
nessus
nessus
F5 Networks BIG-IP : TLS in Mozilla NSS vulnerability (K15630)
2014-10-10 00:00:00
Oracle Solaris Third-Party Patch Update : nss (cve_2013_1620_lucky_thirteen)
2015-01-19 00:00:00
Mandriva Linux Security Advisory : nss (MDVSA-2013:050)
2013-04-20 00:00:00
f5
f5
K15630 : TLS in Mozilla NSS vulnerability CVE-2013-1620
2015-09-17 00:00:00
SOL15630 - TLS in Mozilla NSS vulnerability CVE-2013-1620
2014-09-25 00:00:00
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
ubuntucve
ubuntucve
securityvulns
securityvulns
Mozilla NSS library TLS timing attacks
2013-03-24 00:00:00
[USN-1763-1] NSS vulnerability
2013-03-24 00:00:00
openvas
openvas
Fedora Update for nss FEDORA-2013-3079
2013-03-15 00:00:00
Fedora Update for nss-util FEDORA-2013-2929
2013-03-05 00:00:00
Fedora Update for nss-softokn FEDORA-2013-2929
2013-03-05 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nss-util-3.14.3-1.fc18
2013-02-28 07:04:40
[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17
2013-03-14 02:40:31
[SECURITY] Fedora 18 Update: nss-softokn-3.14.3-1.fc18
2013-02-28 07:04:40
ubuntu
ubuntu
NSS vulnerability
2013-03-14 00:00:00
ibm
ibm
veracode
veracode
Timing Attacks
2017-02-10 05:59:15
Timing Side- Channel Attack
2019-01-15 08:52:54
Denial Of Service
2019-01-15 08:52:48
slackware
slackware
openssl
2013-02-11 23:49:59
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
Vulnerability in OpenSSL CVE-2016-2107
2016-05-03 00:00:00
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
debiancve
debiancve
centos
centos
nspr, nss security update
2013-08-05 19:56:06
nspr, nss security update
2013-08-07 22:22:50
java security update
2013-02-20 20:11:32
amazon
amazon
redhat
redhat
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2013-08-05 00:00:00
nss, nss-util, nss-softokn, and nspr security update
2013-08-07 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
Security update for Java (important)
2013-02-22 20:04:33
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 17:04:41
osv
osv
CVE-2016-2107
2016-05-05 01:59:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
openssl - several vulnerabilities
2013-02-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.6%
Related for DEBIANCVE:CVE-2013-1620