QwikSec

Security Database

CVE

CWE

Training

CVE-2013-1618

Published: Feb 8, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.isg.rhul.ac.uk/tls/TLStiming.pdf

x_refsource_MISC

[oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations

mailing-list

x_refsource_MLIST

http://www.opera.com/support/kb/view/1044/

x_refsource_CONFIRM

http://www.opera.com/docs/changelogs/unified/1213/

x_refsource_CONFIRM

openSUSE-SU-2013:0289

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.