Lucene search
HistoryFeb 08, 2013 - 7:55 p.m.
CVE-2013-1624
tls implementation
bouncy castle
java
c#
library
timing side-channel attacks
remote attackers
distinguishing attacks
plaintext-recovery attacks
cbc padding
statistical analysis
timing data
crafted packets
nvd
cve-2013-1624
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%
The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Affected configurations
Node
bouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.01
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.02
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.03
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.04
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.05
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.06
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.07
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.08
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.09
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.10
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.11
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.12
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.13
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.14
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.15
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.16
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.17
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.18
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.19
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.20
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.21
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.22
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.23
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.24
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.25
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.26
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.27
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.28
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.29
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.30
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.31
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.32
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.33
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.34
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.35
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.36
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.37
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.38
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.39
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.40
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.41
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.42
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.43
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.44
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.45
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.46
ORbouncycastlelegion-of-the-bouncy-castle-java-crytography-apiMatch1.47
Node
bouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch0.0
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.0
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.1
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.2
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.3
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.4
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.5
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.6.1
ORbouncycastlelegion-of-the-bouncy-castle-c\#-cryptography-apiMatch1.7
Related
ubuntucve
ubuntucve
debiancve
debiancve
osv
osv
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
CVE-2016-2107
2016-05-05 01:59:00
openssl - several vulnerabilities
2013-02-13 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
github
github
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
nvd
nvd
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)
2019-07-25 19:00:02
Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-0169)
2018-06-17 04:48:04
Security Bulletin: Rational Build Forge Security Advisory (CVE-2013-0169)
2018-06-17 04:47:31
nessus
nessus
IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.200 Information Disclosure
2014-08-11 00:00:00
F5 Networks BIG-IP : TLS/DTLS 'Lucky 13' vulnerability (K14190)
2014-10-10 00:00:00
Ipswitch IMail Server 11.x / 12.x < 12.3 Information Disclosure
2014-07-14 00:00:00
securityvulns
securityvulns
ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
2013-07-15 00:00:00
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
2014-04-07 00:00:00
slackware
slackware
openssl
2013-02-11 23:49:59
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
Vulnerability in OpenSSL CVE-2016-2107
2016-05-03 00:00:00
veracode
veracode
Timing Side- Channel Attack
2019-01-15 08:52:54
Timing Attacks
2017-02-10 05:59:15
Padding Oracle Attack
2017-01-27 03:10:31
f5
f5
SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2013-02-08 00:00:00
K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2015-04-30 00:00:00
K15637 : GnuTLS vulnerability CVE-2013-2116
2014-10-16 00:00:00
openvas
openvas
OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Linux
2021-08-17 00:00:00
Slackware: Security Advisory (SSA:2013-042-01)
2022-04-21 00:00:00
OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Windows
2021-08-17 00:00:00
redhat
redhat
(RHSA-2014:0371) Important: Red Hat JBoss BPM Suite 6.0.1 update
2014-04-03 21:08:23
(RHSA-2014:0372) Important: Red Hat JBoss BRMS 6.0.1 update
2014-04-03 21:26:33
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
pentestpartners
pentestpartners
Vulnerabilities that (mostly) aren’t: LUCKY13
2024-05-03 05:12:27
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
cve
cve
centos
centos
java security update
2013-02-20 20:11:32
java security update
2013-02-20 20:33:43
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
suse
suse
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
Security update for Java (important)
2013-02-22 20:04:33
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 17:04:41
fedora
fedora
[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18
2013-04-03 04:51:11
[SECURITY] Fedora 18 Update: openssl-1.0.1e-3.fc18
2013-03-02 19:55:52
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2013-02-20 00:00:00
java-1.6.0-openjdk security update
2013-02-20 00:00:00
amazon
amazon
Critical: openssl
2014-04-07 17:26:00
Important: java-1.6.0-openjdk
2013-03-02 16:50:00
alpinelinux
alpinelinux
CVE-2016-2107
2016-05-05 01:59:03
CVE-2018-0497
2018-07-28 17:29:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:03.openssl
2013-04-02 00:00:00
aix
aix
AIX OpenSSH Vulnerability
2013-04-08 15:19:58
Multiple OpenSSL vulnerabilities
2013-03-15 03:20:11
debian
debian
[SECURITY] [DSA 2621-1] openssl security update
2013-02-13 20:07:41
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%
Related for CVE-2013-1624