CVE-2013-1620
08.02.2013, 19:55
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | network_security_services | 𝑥 < 3.14.3 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 11.10 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
| oracle | enterprise_manager_ops_center | 11.1 |
| oracle | enterprise_manager_ops_center | 12.1 |
| oracle | enterprise_manager_ops_center | 12.2 |
| oracle | glassfish_communications_server | 2.0 |
| oracle | glassfish_server | 2.1.1 |
| oracle | iplanet_web_proxy_server | 4.0 |
| oracle | iplanet_web_server | 6.1 |
| oracle | iplanet_web_server | 7.0 |
| oracle | opensso | 3.0-03 |
| oracle | traffic_director | 11.1.1.6.0 |
| oracle | traffic_director | 11.1.1.7.0 |
| oracle | vm_server | 3.2 |
| redhat | enterprise_linux_desktop | 5.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_eus | 5.9 |
| redhat | enterprise_linux_server | 5.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server_aus | 5.9 |
| redhat | enterprise_linux_workstation | 5.0 |
| redhat | enterprise_linux_workstation | 6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libfreebl3 |
| ||||||||||||||||
| libfreebl3-32bit |
| ||||||||||||||||
| libfreebl3-hmac |
| ||||||||||||||||
| libfreebl3-hmac-32bit |
| ||||||||||||||||
| libsoftokn3 |
| ||||||||||||||||
| libsoftokn3-32bit |
| ||||||||||||||||
| libsoftokn3-hmac |
| ||||||||||||||||
| libsoftokn3-hmac-32bit |
| ||||||||||||||||
| mozilla-nss |
| ||||||||||||||||
| mozilla-nss-32bit |
| ||||||||||||||||
| mozilla-nss-certs |
| ||||||||||||||||
| mozilla-nss-certs-32bit |
| ||||||||||||||||
| mozilla-nss-devel |
| ||||||||||||||||
| mozilla-nss-sysinit |
| ||||||||||||||||
| mozilla-nss-sysinit-32bit |
| ||||||||||||||||
| mozilla-nss-tools |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| nspr |
| ||
| nspr-devel |
| ||
| nss |
| ||
| nss-devel |
| ||
| nss-pkcs11-devel |
| ||
| nss-softokn |
| ||
| nss-softokn-devel |
| ||
| nss-softokn-freebl |
| ||
| nss-softokn-freebl-devel |
| ||
| nss-sysinit |
| ||
| nss-tools |
| ||
| nss-util |
| ||
| nss-util-devel |
|
References