Lucene search
FreeBSD69BFC852-9BD0-11E2-A7BE-8C705AF55518HistoryApr 02, 2013 - 12:00 a.m.
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-0200:00:00
vuxml.freebsd.org
30
openssl
ocsp
verification
denial of service
cbc
ciphersuites
plaintext
timing attack
unix
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.008
Percentile
82.5%
A flaw in the OpenSSL handling of OCSP response
verification could be exploited to cause a denial of
service attack.
OpenSSL has a weakness in the handling of CBC
ciphersuites in SSL, TLS and DTLS. The weakness could reveal
plaintext in a timing attack.
Affected configurations
Node
freebsdfreebsdRange8.3–8.3_7
References
Related
nessus
nessus
FreeBSD : FreeBSD -- OpenSSL multiple vulnerabilities (69bfc852-9bd0-11e2-a7be-8c705af55518)
2013-04-08 00:00:00
Juniper Junos OpenSSL Multiple Vulnerabilities (JSA10575)
2013-07-16 00:00:00
Debian DSA-2621-1 : openssl - several vulnerabilities
2013-02-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 2621-1 (openssl - several vulnerabilities)
2013-02-13 00:00:00
VMware Security Updates for vCenter Server (VMSA-2013-0009)
2014-01-09 00:00:00
Debian: Security Advisory (DSA-2621-1)
2013-02-12 00:00:00
osv
osv
openssl - several vulnerabilities
2013-02-13 00:00:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
CVE-2016-2107
2016-05-05 01:59:00
altlinux
altlinux
Security fix for the ALT Linux 6 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
redhat
redhat
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
(RHSA-2013:0587) Moderate: openssl security update
2013-03-04 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:03.openssl
2013-04-02 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2013-03-15 03:20:11
debian
debian
[SECURITY] [DSA 2621-1] openssl security update
2013-02-13 20:07:41
fedora
fedora
[SECURITY] Fedora 18 Update: openssl-1.0.1e-3.fc18
2013-03-02 19:55:52
[SECURITY] Fedora 17 Update: openssl-1.0.0k-1.fc17
2013-03-08 00:02:36
oraclelinux
oraclelinux
openssl security update
2013-03-04 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
ibm
ibm
centos
centos
openssl security update
2013-03-04 22:46:45
java security update
2013-02-20 20:11:32
amazon
amazon
Medium: openssl
2013-03-14 22:04:00
Important: java-1.6.0-openjdk
2013-03-02 16:50:00
freebsd
freebsd
OpenSSL -- TLS 1.1, 1.2 denial of service
2013-02-05 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2013-02-21 00:00:00
securityvulns
securityvulns
ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
OpenSSL / PolarSSL / GnuTLS security vulnerabilities
2013-03-02 00:00:00
cvelist
cvelist
nvd
nvd
debiancve
debiancve
ubuntucve
ubuntucve
f5
f5
K14261 : OpenSSL OCSP vulnerability CVE-2013-0166
2014-04-03 00:00:00
SOL14261 - OpenSSL OCSP vulnerability CVE-2013-0166
2013-03-07 00:00:00
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
prion
prion
Null pointer dereference
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
cve
cve
openssl
openssl
Vulnerability in OpenSSL - OCSP invalid key DoS issue
2013-02-05 00:00:00
Vulnerability in OpenSSL - SSL, TLS and DTLS Plaintext Recovery Attack
2013-02-04 00:00:00
Vulnerability in OpenSSL - Padding oracle in AES-NI CBC MAC check
2016-05-03 00:00:00
veracode
veracode
Timing Attacks
2017-02-10 05:59:15
Timing Side- Channel Attack
2019-01-15 08:52:54
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-08 05:51:39
pentestpartners
pentestpartners
Vulnerabilities that (mostly) aren’t: LUCKY13
2024-05-03 05:12:27
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
vmware
vmware
VMware vSphere, ESX and ESXi updates to third party libraries
2013-07-31 00:00:00
VMware vSphere, ESX and ESXi updates to third party libraries
2013-07-31 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 17:04:41
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.008
Percentile
82.5%
Related for 69BFC852-9BD0-11E2-A7BE-8C705AF55518