Количество 22
Количество 22
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as use ...
GHSA-pg96-42c4-p633
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
ELSA-2013-0274
ELSA-2013-0274: java-1.6.0-openjdk security update (IMPORTANT)
ELSA-2013-0273
ELSA-2013-0273: java-1.6.0-openjdk security update (CRITICAL)
ELSA-2013-0587
ELSA-2013-0587: openssl security update (MODERATE)
ELSA-2013-0275
ELSA-2013-0275: java-1.7.0-openjdk security update (IMPORTANT)
BDU:2015-09702
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
SUSE-SU-2015:1183-1
Security update for compat-openssl097g
SUSE-SU-2015:0578-1
Security update for compat-openssl097g
SUSE-SU-2015:0543-1
Security update for compat-openssl097g
SUSE-SU-2015:0182-2
Security update for compat-openssl097g
SUSE-SU-2015:1184-2
Security update for OpenSSL
SUSE-SU-2015:0545-1
Security update for OpenSSL
openSUSE-SU-2016:0640-1
Security update for libopenssl0_9_8
SUSE-SU-2015:1184-1
Security update for OpenSSL
SUSE-SU-2015:1086-1
Security update for IBM Java 6
SUSE-SU-2015:0392-1
Security update for IBM Java 6
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
 | CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. | CVSS2: 5.1 | 1% Низкий | около 13 лет назад |
 | CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
| CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as use ... | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
| GHSA-pg96-42c4-p633 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. | 1% Низкий | почти 4 года назад | |
| ELSA-2013-0274 ELSA-2013-0274: java-1.6.0-openjdk security update (IMPORTANT) | почти 13 лет назад | ||
| ELSA-2013-0273 ELSA-2013-0273: java-1.6.0-openjdk security update (CRITICAL) | почти 13 лет назад | ||
| ELSA-2013-0587 ELSA-2013-0587: openssl security update (MODERATE) | почти 13 лет назад | ||
| ELSA-2013-0275 ELSA-2013-0275: java-1.7.0-openjdk security update (IMPORTANT) | почти 13 лет назад | ||
 | BDU:2015-09702 Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации | CVSS2: 4.3 | больше 12 лет назад | |
 | SUSE-SU-2015:1183-1 Security update for compat-openssl097g | больше 13 лет назад | ||
| SUSE-SU-2015:0578-1 Security update for compat-openssl097g | больше 13 лет назад | ||
| SUSE-SU-2015:0543-1 Security update for compat-openssl097g | больше 13 лет назад | ||
| SUSE-SU-2015:0182-2 Security update for compat-openssl097g | больше 13 лет назад | ||
| SUSE-SU-2015:1184-2 Security update for OpenSSL | почти 13 лет назад | ||
| SUSE-SU-2015:0545-1 Security update for OpenSSL | почти 13 лет назад | ||
| openSUSE-SU-2016:0640-1 Security update for libopenssl0_9_8 | почти 10 лет назад | ||
| SUSE-SU-2015:1184-1 Security update for OpenSSL | больше 11 лет назад | ||
| SUSE-SU-2015:1086-1 Security update for IBM Java 6 | около 12 лет назад | ||
| SUSE-SU-2015:0392-1 Security update for IBM Java 6 | около 12 лет назад |
Уязвимостей на страницу