Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-1619HistoryFeb 08, 2013 - 7:55 p.m.
CVE-2013-1619
2013-02-0819:55:01
Debian Security Bug Tracker
security-tracker.debian.org
14
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
77.3%
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnutls28 | < 3.0.22-3 | gnutls28_3.0.22-3_all.deb |
| Debian | 11 | all | gnutls28 | < 3.0.22-3 | gnutls28_3.0.22-3_all.deb |
| Debian | 10 | all | gnutls28 | < 3.0.22-3 | gnutls28_3.0.22-3_all.deb |
| Debian | 999 | all | gnutls28 | < 3.0.22-3 | gnutls28_3.0.22-3_all.deb |
| Debian | 13 | all | gnutls28 | < 3.0.22-3 | gnutls28_3.0.22-3_all.deb |
Related
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
Design/Logic Flaw
2013-02-08 19:55:00
f5
f5
K15721 : GnuTLS vulnerability CVE-2013-1619
2014-10-23 00:00:00
SOL15721 - GnuTLS vulnerability CVE-2013-1619
2014-10-23 00:00:00
SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
2013-02-08 00:00:00
cvelist
cvelist
nvd
nvd
cve
cve
nessus
nessus
Oracle Solaris Third-Party Patch Update : gnutls (cve_2013_1619_cryptographic_issues)
2015-01-19 00:00:00
Amazon Linux AMI : gnutls (ALAS-2013-172)
2013-09-04 00:00:00
Slackware 14.0 / current : gnutls (SSA:2013-242-03)
2013-09-02 00:00:00
openvas
openvas
Fedora Update for mingw-gnutls FEDORA-2013-2110
2013-02-18 00:00:00
Fedora Update for mingw-gnutls FEDORA-2013-3438
2013-03-15 00:00:00
Fedora Update for mingw-gnutls FEDORA-2013-2128
2013-02-18 00:00:00
centos
centos
gnutls security update
2013-03-04 22:46:23
gnutls security update
2013-05-30 18:50:13
java security update
2013-02-20 20:11:32
fedora
fedora
[SECURITY] Fedora 17 Update: gnutls-2.12.23-1.fc17
2013-03-12 23:33:08
[SECURITY] Fedora 18 Update: gnutls-2.12.23-1.fc18
2013-03-05 23:27:08
[SECURITY] Fedora 18 Update: mingw-gnutls-2.12.23-1.fc18
2013-03-14 02:58:28
securityvulns
securityvulns
[USN-1752-1] GnuTLS vulnerability
2013-03-02 00:00:00
OpenSSL / PolarSSL / GnuTLS security vulnerabilities
2013-03-02 00:00:00
ubuntu
ubuntu
GnuTLS vulnerability
2013-02-27 00:00:00
redhat
redhat
(RHSA-2013:0588) Moderate: gnutls security update
2013-03-04 00:00:00
(RHSA-2013:0883) Important: gnutls security update
2013-05-30 00:00:00
(RHSA-2013:0783) Moderate: openssl security update
2013-05-01 17:58:17
slackware
slackware
[slackware-security] gnutls
2013-08-30 20:25:45
[slackware-security] gnutls
2013-08-30 07:46:14
openssl
2013-02-11 23:49:59
amazon
amazon
Medium: gnutls
2013-03-14 22:04:00
Important: gnutls
2013-06-11 22:44:00
oraclelinux
oraclelinux
gnutls security update
2013-03-04 00:00:00
gnutls security update
2013-05-30 00:00:00
ibm
ibm
veracode
veracode
Information Leakage
2019-01-15 08:58:55
Timing Side- Channel Attack
2019-01-15 08:52:54
Timing Attacks
2017-02-10 05:59:15
openssl
openssl
Vulnerability in OpenSSL CVE-2013-0169
2013-02-04 00:00:00
debiancve
debiancve
pentestpartners
pentestpartners
Vulnerabilities that (mostly) aren’t: LUCKY13
2024-05-03 05:12:27
hackerone
hackerone
Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com
2017-07-30 20:00:47
suse
suse
gnutls (critical)
2014-03-08 19:04:13
java-1_6_0-openjdk: update to icedtea 1.12.3 (important)
2013-03-01 18:04:30
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2013-10-28 00:00:00
osv
osv
Improper Input Validation in Bouncy Castle
2022-05-14 02:14:04
CVE-2016-2107
2016-05-05 01:59:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.0k-alt1
2013-02-27 00:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2013-04-02 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
77.3%
Related for DEBIANCVE:CVE-2013-1619