CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requireme...
LowCVSS 2.6
EPSS 35.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bouncycastle(Debian:12) | < 1.48+dfsg-2 | 1.48+dfsg-2 |
| debian/bouncycastle(Debian:13) | < 1.48+dfsg-2 | 1.48+dfsg-2 |
| debian/bouncycastle(Debian:14) | < 1.48+dfsg-2 | 1.48+dfsg-2 |
| debian/gnutls28(Debian:12) | < 3.0.22-3 | 3.0.22-3 |
| debian/gnutls28(Debian:13) | < 3.0.22-3 | 3.0.22-3 |
| debian/gnutls28(Debian:14) | < 3.0.22-3 | 3.0.22-3 |
| debian/nss(Debian:12) | < 2:3.14.3-1 | 2:3.14.3-1 |
| debian/nss(Debian:13) | < 2:3.14.3-1 | 2:3.14.3-1 |
| debian/nss(Debian:14) | < 2:3.14.3-1 | 2:3.14.3-1 |
| debian/openssl(Debian:12) | < 1.0.1e-1 | 1.0.1e-1 |
| debian/openssl(Debian:13) | < 1.0.1e-1 | 1.0.1e-1 |
| debian/openssl(Debian:14) | < 1.0.1e-1 | 1.0.1e-1 |
| OpenSSL | >= 0.9.8, <= 0.9.8x | No fix listed |
| OpenSSL | >= 1.0.0, <= 1.0.0j | No fix listed |
| OpenSSL | >= 1.0.1, <= 1.0.1d | No fix listed |
| oracle openjdk | = 1.6.0 | No fix listed |
| oracle openjdk | = 1.6.0-update1 | No fix listed |
| oracle openjdk | = 1.6.0-update10 | No fix listed |
| oracle openjdk | = 1.6.0-update11 | No fix listed |
| oracle openjdk | = 1.6.0-update12 | No fix listed |
| oracle openjdk | = 1.6.0-update13 | No fix listed |
| oracle openjdk | = 1.6.0-update14 | No fix listed |
| oracle openjdk | = 1.6.0-update15 | No fix listed |
| oracle openjdk | = 1.6.0-update16 | No fix listed |
| oracle openjdk | = 1.6.0-update17 | No fix listed |
Show 59 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle openjdk | = 1.6.0-update18 | No fix listed |
| oracle openjdk | = 1.6.0-update19 | No fix listed |
| oracle openjdk | = 1.6.0-update2 | No fix listed |
| oracle openjdk | = 1.6.0-update20 | No fix listed |
| oracle openjdk | = 1.6.0-update21 | No fix listed |
| oracle openjdk | = 1.6.0-update22 | No fix listed |
| oracle openjdk | = 1.6.0-update23 | No fix listed |
| oracle openjdk | = 1.6.0-update24 | No fix listed |
| oracle openjdk | = 1.6.0-update25 | No fix listed |
| oracle openjdk | = 1.6.0-update26 | No fix listed |
| oracle openjdk | = 1.6.0-update27 | No fix listed |
| oracle openjdk | = 1.6.0-update29 | No fix listed |
| oracle openjdk | = 1.6.0-update3 | No fix listed |
| oracle openjdk | = 1.6.0-update30 | No fix listed |
| oracle openjdk | = 1.6.0-update31 | No fix listed |
| oracle openjdk | = 1.6.0-update32 | No fix listed |
| oracle openjdk | = 1.6.0-update33 | No fix listed |
| oracle openjdk | = 1.6.0-update34 | No fix listed |
| oracle openjdk | = 1.6.0-update35 | No fix listed |
| oracle openjdk | = 1.6.0-update37 | No fix listed |
| oracle openjdk | = 1.6.0-update38 | No fix listed |
| oracle openjdk | = 1.6.0-update4 | No fix listed |
| oracle openjdk | = 1.6.0-update5 | No fix listed |
| oracle openjdk | = 1.6.0-update6 | No fix listed |
| oracle openjdk | = 1.6.0-update7 | No fix listed |
| oracle openjdk | = 1.7.0 | No fix listed |
| oracle openjdk | = 1.7.0-update1 | No fix listed |
| oracle openjdk | = 1.7.0-update10 | No fix listed |
| oracle openjdk | = 1.7.0-update11 | No fix listed |
| oracle openjdk | = 1.7.0-update13 | No fix listed |
| oracle openjdk | = 1.7.0-update2 | No fix listed |
| oracle openjdk | = 1.7.0-update3 | No fix listed |
| oracle openjdk | = 1.7.0-update4 | No fix listed |
| oracle openjdk | = 1.7.0-update5 | No fix listed |
| oracle openjdk | = 1.7.0-update6 | No fix listed |
| oracle openjdk | = 1.7.0-update7 | No fix listed |
| oracle openjdk | = 1.7.0-update9 | No fix listed |
| polarssl | = 0.10.0 | No fix listed |
| polarssl | = 0.10.1 | No fix listed |
| polarssl | = 0.11.0 | No fix listed |
| polarssl | = 0.11.1 | No fix listed |
| polarssl | = 0.12.0 | No fix listed |
| polarssl | = 0.12.1 | No fix listed |
| polarssl | = 0.13.1 | No fix listed |
| polarssl | = 0.14.0 | No fix listed |
| polarssl | = 0.14.2 | No fix listed |
| polarssl | = 0.14.3 | No fix listed |
| polarssl | = 0.99-pre1 | No fix listed |
| polarssl | = 0.99-pre3 | No fix listed |
| polarssl | = 0.99-pre4 | No fix listed |
| polarssl | = 0.99-pre5 | No fix listed |
| polarssl | = 1.0.0 | No fix listed |
| polarssl | = 1.1.0 | No fix listed |
| polarssl | = 1.1.0-rc0 | No fix listed |
| polarssl | = 1.1.0-rc1 | No fix listed |
| polarssl | = 1.1.1 | No fix listed |
| polarssl | = 1.1.2 | No fix listed |
| polarssl | = 1.1.3 | No fix listed |
| polarssl | = 1.1.4 | No fix listed |
References
- Debian Security Tracker CVE-2013-0169 vendor-advisory
- blog.fuseyism.com third-party-advisory
- APPLE-SA-2013-09-12-1 mailing-list third-party-advisory vendor-advisory
- FEDORA-2013-4403 third-party-advisory vendor-advisory
- SUSE-SU-2013:0328 third-party-advisory vendor-advisory
- openSUSE-SU-2013:0375 third-party-advisory vendor-advisory
- openSUSE-SU-2013:0378 third-party-advisory vendor-advisory
- SUSE-SU-2013:0701 third-party-advisory vendor-advisory
- SUSE-SU-2014:0320 third-party-advisory vendor-advisory
- SUSE-SU-2015:0578 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0640 third-party-advisory vendor-advisory
- HPSBUX02856 third-party-advisory vendor-advisory
- SSRT101108 third-party-advisory vendor-advisory
- HPSBUX02857 third-party-advisory vendor-advisory
- HPSBMU02874 third-party-advisory vendor-advisory
- SSRT101289 third-party-advisory vendor-advisory
- [oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations mailing-list
- RHSA-2013:0587 third-party-advisory vendor-advisory
- RHSA-2013:0782 third-party-advisory vendor-advisory
- RHSA-2013:0783 third-party-advisory vendor-advisory
- RHSA-2013:0833 third-party-advisory vendor-advisory
- RHSA-2013:1455 third-party-advisory vendor-advisory
- RHSA-2013:1456 third-party-advisory vendor-advisory
- 53623 third-party-advisory
- 55108 third-party-advisory
- 55139 third-party-advisory
- 55322 third-party-advisory
- 55350 third-party-advisory
- 55351 third-party-advisory
- GLSA-201406-32 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- www-01.ibm.com third-party-advisory
- DSA-2621 third-party-advisory vendor-advisory
- DSA-2622 third-party-advisory vendor-advisory
- www.isg.rhul.ac.uk third-party-advisory
- VU#737740 third-party-advisory us-government-resource
- MDVSA-2013:095 third-party-advisory vendor-advisory
- www.matrixssl.org third-party-advisory
- www.openssl.org vendor-advisory
- www.oracle.com third-party-advisory
- 57778 third-party-advisory vdb-entry
- 1029190 third-party-advisory vdb-entry
- www.splunk.com third-party-advisory
- USN-1735-1 third-party-advisory vendor-advisory
- TA13-051A third-party-advisory us-government-resource
- cert-portal.siemens.com third-party-advisory
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1518-1] polarssl security update mailing-list third-party-advisory
- oval:org.mitre.oval:def:18841 signature tool-signature vdb-entry
- oval:org.mitre.oval:def:19016 signature tool-signature vdb-entry
- oval:org.mitre.oval:def:19424 signature tool-signature vdb-entry
- oval:org.mitre.oval:def:19540 signature tool-signature vdb-entry
- oval:org.mitre.oval:def:19608 signature third-party-advisory vdb-entry
- polarssl.org vendor-advisory
- puppet.com third-party-advisory
- support.hpe.com third-party-advisory
- wiki.mageia.org third-party-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking