A weakness in the handling of CBC ciphersuites in SSL, TLS and DTLS which could lead to plaintext recovery by exploiting timing differences arising during MAC processing.

slackware 1

ibm 25

veracode 3

f5 11

cvelist 10

nvd 10

nessus 34

securityvulns 5

openvas 29

hackerone 1

debiancve 6

prion 10

pentestpartners 1

cve 10

ubuntucve 10

redhat 3

centos 2

altlinux 5

osv 4

freebsd 1

suse 3

fedora 2

oraclelinux 2

amazon 2

aix 2

freebsd_advisory 1

alpinelinux 2

debian 1

ubuntu 2

github 1

slackware

openssl

2013-02-11 23:49:59

ibm

Security Bulletin: DB2 Recovery Expert for Linux, UNIX and Windows affected by vulnerability in IBM Java JRE (CVE-2013-0169)

2022-09-25 21:06:56

Security Bulletin: A security vulnerability in IBM Websphere affects IBM Tivoli Netcool Performance Manager for Wireline (CVE-2013-0169)

2020-05-07 04:56:20

Security Bulletin: Potential Security Exposure in IBM HTTP Server CVE-2013-0169 PM85211

2022-09-25 23:13:40

veracode

Timing Side- Channel Attack

2019-01-15 08:52:54

Timing Attacks

2017-02-10 05:59:15

Padding Oracle Attack

2017-01-27 03:10:31

SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169

2013-02-08 00:00:00

K14190 : TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169

2015-04-30 00:00:00

SOL15630 - TLS in Mozilla NSS vulnerability CVE-2013-1620

2014-09-25 00:00:00

cvelist

CVE-2013-0169

2013-02-08 19:00:00

CVE-2013-1623

2013-02-08 19:00:00

CVE-2016-2107

2016-05-05 00:00:00

nvd

CVE-2013-0169

2013-02-08 19:55:01

CVE-2013-1618

2013-02-08 19:55:01

CVE-2013-1623

2013-02-08 19:55:01

nessus

Ipswitch IMail Server 11.x / 12.x < 12.3 Information Disclosure

2014-07-14 00:00:00

IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.200 Information Disclosure

2014-08-11 00:00:00

F5 Networks BIG-IP : TLS/DTLS 'Lucky 13' vulnerability (K14190)

2014-10-10 00:00:00

securityvulns

ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability

2013-07-15 00:00:00

ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability

2013-07-15 00:00:00

ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities

2014-04-07 00:00:00

openvas

OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Linux

2021-08-17 00:00:00

Slackware: Security Advisory (SSA:2013-042-01)

2022-04-21 00:00:00

OpenSSL: SSL, TLS and DTLS Plaintext Recovery Attack (20130205) - Windows

2021-08-17 00:00:00

hackerone

Legal Robot: LUCKY13 (CVE-2013-0169) effects legalrobot.com

2017-07-30 20:00:47

debiancve

CVE-2013-0169

2013-02-08 19:55:01

CVE-2016-2107

2016-05-05 01:59:03

CVE-2013-1624

2013-02-08 19:55:01

prion

Design/Logic Flaw

2013-02-08 19:55:00

Design/Logic Flaw

2013-02-08 19:55:00

Design/Logic Flaw

2013-02-08 19:55:00

pentestpartners

Vulnerabilities that (mostly) aren’t: LUCKY13

2024-05-03 05:12:27

cve

CVE-2013-0169

2013-02-08 19:55:01

CVE-2013-1621

2013-02-08 19:55:01

CVE-2016-2107

2016-05-05 01:59:03

ubuntucve

CVE-2013-0169

2013-02-08 00:00:00

CVE-2018-0497

2018-07-28 00:00:00

CVE-2016-2107

2016-05-03 00:00:00

redhat

(RHSA-2013:0783) Moderate: openssl security update

2013-05-01 17:58:17

(RHSA-2013:0274) Important: java-1.6.0-openjdk security update

2013-02-20 00:00:00

(RHSA-2013:0273) Critical: java-1.6.0-openjdk security update

2013-02-20 00:00:00

centos

java security update

2013-02-20 20:33:43

java security update

2013-02-20 20:11:32

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.0k-alt1

2013-02-27 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0k-alt1

2013-02-27 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.0k-alt1

2013-02-27 00:00:00

osv

Improper Input Validation in Bouncy Castle

2022-05-14 02:14:04

CVE-2016-2107

2016-05-05 01:59:00

CVE-2018-0497

2018-07-28 17:29:00

freebsd

FreeBSD -- OpenSSL multiple vulnerabilities

2013-04-02 00:00:00

suse

java-1_6_0-openjdk: update to icedtea 1.12.3 (important)

2013-03-01 18:04:30

Security update for Java (important)

2013-02-22 20:04:33

java-1_6_0-openjdk: update to icedtea 1.12.3 (important)

2013-03-01 17:04:41

fedora

[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18

2013-04-03 04:51:11

[SECURITY] Fedora 18 Update: openssl-1.0.1e-3.fc18

2013-03-02 19:55:52

oraclelinux

java-1.6.0-openjdk security update

2013-02-20 00:00:00

java-1.6.0-openjdk security update

2013-02-20 00:00:00

amazon

Critical: openssl

2014-04-07 17:26:00

Important: java-1.6.0-openjdk

2013-03-02 16:50:00

aix

AIX OpenSSH Vulnerability

2013-04-08 15:19:58

Multiple OpenSSL vulnerabilities

2013-03-15 03:20:11

freebsd_advisory

FreeBSD-SA-13:03.openssl

2013-04-02 00:00:00

alpinelinux

CVE-2016-2107

2016-05-05 01:59:03

CVE-2018-0497

2018-07-28 17:29:00

debian

[SECURITY] [DSA 2621-1] openssl security update

2013-02-13 20:07:41

ubuntu

OpenSSL regression

2013-02-28 00:00:00

OpenSSL vulnerability

2013-03-25 00:00:00

github

Improper Input Validation in Bouncy Castle

2022-05-14 02:14:04

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

JSON

Related for OPENSSL:CVE-2013-0169