UBUNTU-CVE-2013-1619

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2013-1619
Published: 08 Feb 2013, 00:00
Last modified:04 Feb 2026, 03:41

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Feb 2013, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 03:41
Last Modified
Vulnerability information updated

Description

The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

Affected Systems

  • ubuntu•gnutls28

    < 3.2.11-2ubuntu1

References (6)