Lucene search
UbuntuUSN-1763-1HistoryMar 14, 2013 - 12:00 a.m.
NSS vulnerability
2013-03-1400:00:00
ubuntu.com
33
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.7%
Releases
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 10.04
Packages
- nss - Network Security Service library
Details
Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used
in NSS was vulnerable to a timing side-channel attack known as the
“Lucky Thirteen” issue. A remote attacker could use this issue to perform
plaintext-recovery attacks via analysis of timing data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.10 | noarch | libnss3 | < 3.14.3-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-1d | < 3.14.3-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-dbg | < 3.14.3-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-dev | < 3.14.3-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-tools | < 3.14.3-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libnss3 | < 3.14.3-0ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libnss3-1d | < 3.14.3-0ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libnss3-dbg | < 3.14.3-0ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libnss3-dev | < 3.14.3-0ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libnss3-tools | < 3.14.3-0ubuntu0.12.04.1 | UNKNOWN |
References
Related
openvas
openvas
Fedora Update for nss-util FEDORA-2013-3079
2013-03-15 00:00:00
Fedora Update for nss FEDORA-2013-3079
2013-03-15 00:00:00
Fedora Update for nspr FEDORA-2013-3079
2013-03-15 00:00:00
securityvulns
securityvulns
Mozilla NSS library TLS timing attacks
2013-03-24 00:00:00
[USN-1763-1] NSS vulnerability
2013-03-24 00:00:00
Oracle / Sun / PeopleSoft / MySQL applications security vulnerabilities
2014-07-21 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nss-util-3.14.3-1.fc18
2013-02-28 07:04:40
[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17
2013-03-14 02:40:31
[SECURITY] Fedora 17 Update: nss-softokn-3.14.3-1.fc17
2013-03-14 02:40:31
nessus
nessus
debiancve
debiancve
CVE-2013-1620
2013-02-08 19:55:00
prion
prion
Design/Logic Flaw
2013-02-08 19:55:00
cve
cve
CVE-2013-1620
2013-02-08 19:55:00
centos
centos
nspr, nss security update
2013-08-05 19:56:06
nspr, nss security update
2013-08-07 22:22:50
nspr, nss security update
2013-12-13 00:04:31
amazon
amazon
redhat
redhat
(RHSA-2013:1135) Moderate: nss and nspr security, bug fix, and enhancement update
2013-08-05 00:00:00
(RHSA-2013:1829) Important: nss, nspr, and nss-util security update
2013-12-12 00:00:00
f5
f5
SOL15630 - TLS in Mozilla NSS vulnerability CVE-2013-1620
2014-09-25 00:00:00
K15630 : TLS in Mozilla NSS vulnerability CVE-2013-1620
2015-09-17 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 08:52:48
Timing Side-Channel
2019-05-02 04:48:16
Denial Of Service (DoS)
2019-05-02 05:00:20
ubuntucve
ubuntucve
CVE-2013-1620
2013-02-08 00:00:00
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2013-08-05 00:00:00
nss, nss-util, nss-softokn, and nspr security update
2013-08-07 00:00:00
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2014-06-21 00:00:00
suse
suse
Mozilla Firefox and others: Update to Firefox 20.0 release (important)
2013-04-05 15:06:14
Mozilla Firefox and others: Update to 20.0/17.0.5 releases (important)
2013-04-05 18:06:10
vmware
vmware
VMware ESX updates to third party libraries
2013-12-05 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.7%
Related for USN-1763-1