The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2013-02-08 19:55
Updated : 2024-02-28 12:00
NVD link : CVE-2013-1620
Mitre link : CVE-2013-1620
CVE.ORG link : CVE-2013-1620
JSON object : View
Products Affected
mozilla
- network_security_services
redhat
- enterprise_linux_workstation
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_server
- enterprise_linux_eus
canonical
- ubuntu_linux
oracle
- traffic_director
- iplanet_web_server
- glassfish_communications_server
- opensso
- vm_server
- iplanet_web_proxy_server
- enterprise_manager_ops_center
- glassfish_server
CWE
CWE-203
Observable Discrepancy