{"id":"CVE-2013-1618","aliases":["EUVD-2013-1653","GHSA-cjrv-3xx9-58f9"],"status":"published","title":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel...","description":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02157,"percentile":0.82312,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2013-02-08T19:00:00Z","modified":"2026-06-16T23:51:47Z","products":[{"vendor":"opera","product":"opera_browser"}],"references":[{"url":"http://www.isg.rhul.ac.uk/tls/TLStiming.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2013/02/05/24","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.opera.com/support/kb/view/1044/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unified/1213/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1618"},{"url":"http://www.opera.com/docs/changelogs/unified/1213"},{"url":"http://www.opera.com/support/kb/view/1044"},{"url":"https://github.com/advisories/GHSA-cjrv-3xx9-58f9"}],"sources":{"cve":[{"id":"CVE-2013-1618","description":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","status":"published","published":"2013-02-08T19:00:00Z","modified":"2024-08-06T15:04:49.563Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1653","description":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","status":"published","published":"2013-02-08T19:00:00Z","modified":"2024-08-06T15:04:49Z","updated_at":"2026-11-03T01:56:41.572158Z"}],"ghsa":[{"id":"GHSA-cjrv-3xx9-58f9","title":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel...","description":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","status":"published","published":"2022-05-17T05:14:01Z","modified":"2025-04-11T04:08:18Z","updated_at":"2026-11-02T15:01:13.040475Z"}],"nvd":[{"id":"CVE-2013-1618","description":"The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.","status":"published","published":"2013-02-08T19:55:01.093Z","modified":"2026-06-16T23:51:47.263Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:21.222658Z"}]}}