Lucene search
GoogleOSV:DSA-2621-1HistoryFeb 13, 2013 - 12:00 a.m.
openssl - several vulnerabilities
2013-02-1300:00:00
Google
osv.dev
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
77.2%
Multiple vulnerabilities have been found in OpenSSL. The Common
Vulnerabilities and Exposures project identifies the following issues:
- CVE-2013-0166
OpenSSL does not properly perform signature verification for OCSP
responses, which allows remote attackers to cause a denial of
service via an invalid key. - CVE-2013-0169
A timing side channel attack has been found in CBC padding
allowing an attacker to recover pieces of plaintext via statistical
analysis of crafted packages, known as the Lucky Thirteen issue.
For the stable distribution (squeeze), these problems have been fixed in
version 0.9.8o-4squeeze14.
For the testing distribution (wheezy), these problems will be fixed soon.
For the unstable distribution (sid), these problems have been fixed in
version 1.0.1e-1.
We recommend that you upgrade your openssl packages.
References
Related
nessus
nessus
Fedora 18 : openssl-1.0.1e-3.fc18 (2013-2834)
2013-03-04 00:00:00
Oracle Solaris Third-Party Patch Update : openssl (lucky_thirteen_vulnerability_in_solaris)
2015-01-19 00:00:00
OpenSSL < 0.9.8y / 1.0.1d / 1.0.0k Multiple Vulnerabilities
2013-06-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
openvas
openvas
Fedora Update for openssl FEDORA-2013-2834
2013-03-05 00:00:00
Debian: Security Advisory (DSA-2621-1)
2013-02-12 00:00:00
VMware Security Updates for vCenter Server (VMSA-2013-0009)
2014-01-09 00:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
OpenSSL -- TLS 1.1, 1.2 denial of service
2013-02-05 00:00:00
redhat
redhat
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
(RHSA-2013:0587) Moderate: openssl security update
2013-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: openssl-1.0.1e-3.fc18
2013-03-02 19:55:52
[SECURITY] Fedora 17 Update: openssl-1.0.0k-1.fc17
2013-03-08 00:02:36
[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18
2013-04-03 04:51:11
aix
aix
Multiple OpenSSL vulnerabilities
2013-03-15 03:20:11
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:03.openssl
2013-04-02 00:00:00
debian
debian
[SECURITY] [DSA 2621-1] openssl security update
2013-02-13 20:07:41
ibm
ibm
amazon
amazon
Medium: openssl
2013-03-14 22:04:00
centos
centos
openssl security update
2013-03-04 22:46:45
java security update
2013-02-20 20:11:32
java security update
2013-02-20 20:33:43
oraclelinux
oraclelinux
openssl security update
2013-03-04 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2013-02-21 00:00:00
securityvulns
securityvulns
f5
f5
K14261 : OpenSSL OCSP vulnerability CVE-2013-0166
2014-04-03 00:00:00
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
SOL14261 - OpenSSL OCSP vulnerability CVE-2013-0166
2013-03-07 00:00:00
prion
prion
Null pointer dereference
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
debiancve
debiancve
ubuntucve
ubuntucve
veracode
veracode
Timing Attacks
2017-02-10 05:59:15
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-08 05:51:39
Timing Side- Channel Attack
2019-01-15 08:52:54
cve
cve
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0166
2013-02-05 00:00:00
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
vmware
vmware
VMware vSphere, ESX and ESXi updates to third party libraries
2013-07-31 00:00:00
VMware vSphere, ESX and ESXi updates to third party libraries
2013-07-31 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
Security update for Java (important)
2013-02-22 20:04:33
osv
osv
CVE-2016-2107
2016-05-05 01:59:00
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
77.2%
Related for OSV:DSA-2621-1