Every CVE Search/ Get API key

CVE-2013-0169

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...

2.6 LowPublic exploitFix available

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Exploit likelihood

35.6%Up 28.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
CVE-2013-0169
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:P/I:N/A:N
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
CVE-2013-0169
Updated
2026-11-02
EUVDEUVD-2013-0208 No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
EUVD-2013-0208
Updated
2026-11-03
GitHub AdvisoriesGHSA-pg96-42c4-p633 No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
GHSA-pg96-42c4-p633
Updated
2026-11-02
OSV No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
CVE-2013-0169
Updated
2026-11-02
OSVDEBIAN-CVE-2013-0169 No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
DEBIAN-CVE-2013-0169
Updated
2026-11-02
Show 20 moreShow less
OSVMGASA-2013-0290 No score

Updated polarssl package fixes security vulnerabilities

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in PolarSSL before 1.2.6, does not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue (CVE-2013-0169).

Array index error in the SSL module in PolarSSL before 1.2.6 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session (CVE-2013-1621).

A third party can set up a SSL/TLS handshake with a server and send a malformed Certificate handshake message that results in an infinite loop for that connection. With a Man-in-the-Middle attack on a client, a third party can trigger the same infinite loop on a client (CVE-2013-4623).

Record
MGASA-2013-0290
Updated
2026-11-02
OSVopenSUSE-SU-2024:10271-1 No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10271-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10529-1 No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10529-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11127-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2015:0182-2 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  can result in memory corruption during buffer management operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>
Record
SUSE-SU-2015:0182-2
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:0392-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0392-1
Updated
2026-11-02
OSVSUSE-SU-2015:0543-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  can result in memory corruption during buffer management operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>
Record
SUSE-SU-2015:0543-1
Updated
2026-11-02
OSVSUSE-SU-2015:0545-1 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
Record
SUSE-SU-2015:0545-1
Updated
2026-11-02
OSVSUSE-SU-2015:0578-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  could have resulted in memory corruption during buffer management
  operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>
Record
SUSE-SU-2015:0578-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02
OSVSUSE-SU-2015:1183-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  could have resulted in memory corruption during buffer management
  operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>
Record
SUSE-SU-2015:1183-1
Updated
2026-11-02
OSVSUSE-SU-2015:1184-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1184-1
Updated
2026-11-02
OSVSUSE-SU-2015:1184-2 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
Record
SUSE-SU-2015:1184-2
Updated
2026-11-02
OSVSUSE-SU-403 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403
Updated
2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403 Forbidden-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-0169 No score

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

Record
UBUNTU-CVE-2013-0169
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bouncycastle
Debian:12
 before 1.48+dfsg-2
1.48+dfsg-2
bouncycastle
Debian:13
 before 1.48+dfsg-2
1.48+dfsg-2
bouncycastle
Debian:14
 before 1.48+dfsg-2
1.48+dfsg-2
gnutls28
Debian:12
 before 3.0.22-3
3.0.22-3
gnutls28
Debian:13
 before 3.0.22-3
3.0.22-3
gnutls28
Debian:14
 before 3.0.22-3
3.0.22-3
nss
Debian:12
 before 2:3.14.3-1
2:3.14.3-1
nss
Debian:13
 before 2:3.14.3-1
2:3.14.3-1
nss
Debian:14
 before 2:3.14.3-1
2:3.14.3-1
openssl
Debian:12
 before 1.0.1e-1
1.0.1e-1
Show 198 moreShow less
Affected packages
PackageAffectedFixed
openssl
Debian:13
 before 1.0.1e-1
1.0.1e-1
openssl
Debian:14
 before 1.0.1e-1
1.0.1e-1
openssl
Debian:6.0
 before 0.9.8o-4squeeze14, plus listed versions
0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze110.9.8o-4squeeze120.9.8o-4squeeze13
Show 8 moreShow less
0.9.8o-4squeeze20.9.8o-4squeeze30.9.8o-4squeeze40.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze50.9.8o-4squeeze70.9.8o-4squeeze80.9.8o-4squeeze9
0.9.8o-4squeeze14
polarssl
Debian:6.0
 before 0.12.1-1squeeze1, plus listed versions
0.12.1-1
0.12.1-1squeeze1
polarssl
Mageia:3
 before 1.2.8-1.mga3
1.2.8-1.mga3
java-1.6.0-openjdk
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-demo
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-devel
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-src
Red Hat:enterprise_linux:6::client
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-devel
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-demo
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-src
Red Hat:enterprise_linux:6::server
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
 before 1:1.6.0.0-1.56.1.11.8.el6_3
1:1.6.0.0-1.56.1.11.8.el6_3
java-1.6.0-openjdk
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.6.0-openjdk-debuginfo
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.6.0-openjdk-demo
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.6.0-openjdk-devel
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.6.0-openjdk-javadoc
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.6.0-openjdk-src
Red Hat:enterprise_linux:5::server
 before 1:1.6.0.0-1.35.1.11.8.el5_9
1:1.6.0.0-1.35.1.11.8.el5_9
java-1.7.0-openjdk
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:5::server
 before 1:1.7.0.9-2.3.7.1.el5_9
1:1.7.0.9-2.3.7.1.el5_9
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.7.1.el6_3
1:1.7.0.9-2.3.7.1.el6_3
java-1.6.0-sun
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun-demo
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun-devel
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun-plugin
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun-src
Red Hat:rhel_extras:5::server
 before 1:1.6.0.41-1jpp.1.el5_9
1:1.6.0.41-1jpp.1.el5_9
java-1.6.0-sun
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.6.0-sun-demo
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.6.0-sun-devel
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.6.0-sun-jdbc
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.6.0-sun-plugin
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.6.0-sun-src
Red Hat:rhel_extras:6
 before 1:1.6.0.41-1jpp.1.el6_3
1:1.6.0.41-1jpp.1.el6_3
java-1.7.0-oracle
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle-devel
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle-src
Red Hat:rhel_extras:5::server
 before 1:1.7.0.15-1jpp.1.el5_9
1:1.7.0.15-1jpp.1.el5_9
java-1.7.0-oracle
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
 before 1:1.7.0.15-1jpp.1.el6_3
1:1.7.0.15-1jpp.1.el6_3
openssl
Red Hat:enterprise_linux:5::server
 before 0:0.9.8e-26.el5_9.1
0:0.9.8e-26.el5_9.1
openssl-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:0.9.8e-26.el5_9.1
0:0.9.8e-26.el5_9.1
openssl-devel
Red Hat:enterprise_linux:5::server
 before 0:0.9.8e-26.el5_9.1
0:0.9.8e-26.el5_9.1
openssl-perl
Red Hat:enterprise_linux:5::server
 before 0:0.9.8e-26.el5_9.1
0:0.9.8e-26.el5_9.1
openssl
Red Hat:enterprise_linux:6::client
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-devel
Red Hat:enterprise_linux:6::client
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-perl
Red Hat:enterprise_linux:6::client
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-static
Red Hat:enterprise_linux:6::client
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-perl
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-static
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl
Red Hat:enterprise_linux:6::server
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-devel
Red Hat:enterprise_linux:6::server
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-perl
Red Hat:enterprise_linux:6::server
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-static
Red Hat:enterprise_linux:6::server
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-perl
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
openssl-static
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.0-27.el6_4.2
0:1.0.0-27.el6_4.2
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.4-20130306.2.el6_4
0:6.4-20130306.2.el6_4
java-1.7.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.7.0.4.2-1jpp.1.el5_9
1:1.7.0.4.2-1jpp.1.el5_9
java-1.7.0-ibm
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.0.4.2-1jpp.1.el6_4
1:1.7.0.4.2-1jpp.1.el6_4
java-1.6.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.6.0.13.2-1jpp.1.el5_9
1:1.6.0.13.2-1jpp.1.el5_9
java-1.6.0-ibm
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.6.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.6.0.13.2-1jpp.1.el6_4
1:1.6.0.13.2-1jpp.1.el6_4
java-1.5.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-accessibility
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.2-1jpp.1.el5_9
1:1.5.0.16.2-1jpp.1.el5_9
java-1.5.0-ibm
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.5.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.5.0.16.2-1jpp.1.el6_4
1:1.5.0.16.2-1jpp.1.el6_4
java-1.6.0-ibm
Red Hat:network_satellite:5.4::el5
 before 1:1.6.0.14.0-1jpp.1.el5_9
1:1.6.0.14.0-1jpp.1.el5_9
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.4::el5
 before 1:1.6.0.14.0-1jpp.1.el5_9
1:1.6.0.14.0-1jpp.1.el5_9
java-1.6.0-ibm
Red Hat:network_satellite:5.4::el6
 before 1:1.6.0.14.0-1jpp.1.el6_4
1:1.6.0.14.0-1jpp.1.el6_4
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.4::el6
 before 1:1.6.0.14.0-1jpp.1.el6_4
1:1.6.0.14.0-1jpp.1.el6_4
java-1.6.0-ibm
Red Hat:network_satellite:5.5::el5
 before 1:1.6.0.14.0-1jpp.1.el5_9
1:1.6.0.14.0-1jpp.1.el5_9
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.5::el5
 before 1:1.6.0.14.0-1jpp.1.el5_9
1:1.6.0.14.0-1jpp.1.el5_9
java-1.6.0-ibm
Red Hat:network_satellite:5.5::el6
 before 1:1.6.0.14.0-1jpp.1.el6_4
1:1.6.0.14.0-1jpp.1.el6_4
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.5::el6
 before 1:1.6.0.14.0-1jpp.1.el6_4
1:1.6.0.14.0-1jpp.1.el6_4
rhevm-spice-client
Red Hat:rhev_manager:3
 before 0:3.3-12.el6_5
0:3.3-12.el6_5
rhevm-spice-client-x64-cab
Red Hat:rhev_manager:3
 before 0:3.3-12.el6_5
0:3.3-12.el6_5
rhevm-spice-client-x64-msi
Red Hat:rhev_manager:3
 before 0:3.3-12.el6_5
0:3.3-12.el6_5
rhevm-spice-client-x86-cab
Red Hat:rhev_manager:3
 before 0:3.3-12.el6_5
0:3.3-12.el6_5
rhevm-spice-client-x86-msi
Red Hat:rhev_manager:3
 before 0:3.3-12.el6_5
0:3.3-12.el6_5
libqt4
SUSE:Linux Enterprise Desktop 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Desktop 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
openssl098
Ubuntu:14.04:LTS
 before 0.9.8o-7ubuntu3.2.14.04.1, plus listed versions
0.9.8o-7ubuntu3.1
0.9.8o-7ubuntu3.2.14.04.1
java-1_7_0-openjdk
openSUSE:Tumbleweed
 before 1.7.0.121-1.1
1.7.0.121-1.1
openssl-1_1
openSUSE:Tumbleweed
 before 1.1.1l-1.2
1.1.1l-1.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubwearohat/lucky132025-04-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-0169 is a low vulnerability (CVSS 2.6) in Openssl, published August 30, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 35.6%, the 98th percentile. Fixed in bouncycastle 1.48+dfsg-2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,779 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open