CVE-2013-0169

score

<0.1

cvss

2.6

epss

35.6%

published

2013-02-08

kev added

—

first seen

2026-10-21

OpenSSL, OpenJDK, PolarSSL, and other products using TLS 1.1, 1.2, DTLS 1.0, and 1.2 contain a timing side-channel vulnerability caused by improper handling of CBC padding during MAC check, letting remote attackers perform distinguishing and plaintext-recovery attacks via timing analysis, aka "Lucky Thirteen".