{"id":"CVE-2013-0169","published":"2013-02-08T19:00:00Z","modified":"2024-08-06T14:18:09Z","title":"The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other…","vendor":null,"product":null,"tier":"tail","description":{"text":"The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.35584,"percentile":0.98451,"provenance":"source"},"cwes":[],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.matrixssl.org/news.html","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA13-051A.html","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:095","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://secunia.com/advisories/55139","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/55322","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.openssl.org/news/secadv_20130204.txt","tags":["x_refsource_CONFIRM"]},{"url":"http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/","tags":["x_refsource_MISC"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084","tags":["x_refsource_CONFIRM"]},{"url":"http://www.isg.rhul.ac.uk/tls/TLStiming.pdf","tags":["x_refsource_MISC"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.debian.org/security/2013/dsa-2622","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/57778","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21644047","tags":["x_refsource_CONFIRM"]},{"url":"http://openwall.com/lists/oss-security/2013/02/05/24","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/55351","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=136396549913849&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"https://puppet.com/security/cve/cve-2013-0169","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0833.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.ubuntu.com/usn/USN-1735-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/53623","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.kb.cert.org/vuls/id/737740","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.debian.org/security/2013/dsa-2621","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0783.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://marc.info/?l=bugtraq&m=136733161405818&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://secunia.com/advisories/55108","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0782.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released","tags":["x_refsource_CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.securitytracker.com/id/1029190","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841","tags":["vdb-entry","signature","x_refsource_OVAL"]}],"priority":{"score":24.7,"factors":[{"name":"EPSS percentile","points":19.69},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-04-01","earliestUrl":"https://github.com/wearohat/lucky13","repos":[{"name":"wearohat/lucky13","url":"https://github.com/wearohat/lucky13","stars":4,"created":"2025-04-01"}]},"first":{"date":"2025-04-01","source":"PoC-in-GitHub","url":"https://github.com/wearohat/lucky13"},"provenance":"source"},"referencesTotal":55,"euvd":{"id":"EUVD-2013-0208","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2013-0169-family-cve-2013-0169","children":[{"from":"CVE-2013-0169","to":"CVE-2013-2116","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this might be due to an incorrect fix for CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-2116"}]},{"from":"CVE-2013-0169","to":"CVE-2016-2107","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.","from":"CVE.org","in":"CVE-2016-2107"}]},{"from":"CVE-2013-0169","to":"CVE-2018-0497","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.","from":"CVE.org","in":"CVE-2018-0497"}]},{"from":"CVE-2013-0169","to":"CVE-2013-1618","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-1618"}]},{"from":"CVE-2013-0169","to":"CVE-2013-1619","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-1619"}]},{"from":"CVE-2013-0169","to":"CVE-2013-1620","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-1620"}]},{"from":"CVE-2013-0169","to":"CVE-2013-1623","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-1623"}]},{"from":"CVE-2013-0169","to":"CVE-2013-1624","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","from":"CVE.org","in":"CVE-2013-1624"}]}]}}