Description
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | asterisk | 1:13.7.2~dfsg-1 | — |
| Debian 14 | bouncycastle | 1.49+dfsg-1 | — |
| Debian 14 | curl | 7.24.0-1 | — |
| Debian 14 | erlang | 1:15.b-dfsg-1 | — |
| Debian 14 | gnutls28 +1 | No fix yet | — |
| Debian 14 | lighttpd | 1.4.30-1 | — |
| Debian 14 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 14 | pound | 2.6-2 | — |
| Debian 13 | bouncycastle | 1.49+dfsg-1 | — |
| Debian 13 | curl | 7.24.0-1 | — |
| Debian 13 | erlang | 1:15.b-dfsg-1 | — |
| Debian 13 | gnutls28 +1 | No fix yet | — |
| Debian 13 | lighttpd | 1.4.30-1 | — |
| Debian 13 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 13 | pound | 2.6-2 | — |
| Debian 12 | bouncycastle | 1.49+dfsg-1 | — |
| Debian 12 | curl | 7.24.0-1 | — |
| Debian 12 | erlang | 1:15.b-dfsg-1 | — |
| Debian 12 | gnutls28 +1 | No fix yet | — |
| Debian 12 | lighttpd | 1.4.30-1 | — |
| Debian 12 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 6.0 | curl | 7.21.0-2.1+squeeze1 | DSA-2398-1 |
| Debian 6.0 | lighttpd | 1.4.28-2+squeeze1 | DSA-2368-1 |
| Debian 6.0 | nss | 3.12.8-1+squeeze11 | DLA-154-1 |
| Debian 6.0 | openjdk-6 | 6b18-1.8.10-0+squeeze2 | DSA-2356-1 |
| Debian 6.0 | pound | 2.6-1+deb6u1 | DLA-400-1 |
| Debian 5.0 | curl | 7.18.2-8lenny6 | DSA-2398-1 |
| Debian 5.0 | lighttpd | 1.4.19-5+lenny3 | DSA-2368-1 |
| Debian 5.0 | openjdk-6 | 6b18-1.8.10-0~lenny2 | DSA-2358-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.13.1-1jpp.2.el6_2 | RHSA-2012:0508 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.10.0-1jpp.2.el6 | RHSA-2012:0034 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.40.1.9.10.el6_1 | RHSA-2011:1380 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el6 | RHSA-2011:1384 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13.11-1jpp.1.el5 | RHSA-2012:0006 |
| RHEL 5 | java-1.4.2-ibm-sap +4 | 1.4.2.13.11.sap-1jpp.1.el5 | RHSA-2012:0343 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.13.1-1jpp.1.el5 | RHSA-2012:0508 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.10.0-1jpp.2.el5 | RHSA-2012:0034 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.23.1.9.10.el5_7 | RHSA-2011:1380 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el5 | RHSA-2011:1384 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.13.11-1jpp.1.el4 | RHSA-2012:0006 |
| RHEL 4 | java-1.4.2-ibm-sap +4 | 1.4.2.13.11.sap-1jpp.1.el4 | RHSA-2012:0343 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.10.0-1jpp.2.el4 | RHSA-2012:0034 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el4 | RHSA-2011:1384 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1455 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | python | 2.7.17-7.32.2 | SUSE-SU-2020:0234-1 |
| SLES 15 SP1 | python-base | 2.7.17-7.32.1 | SUSE-SU-2020:0234-1 |
| SLES 15 SP1 | python3 +1 | 3.6.10-3.42.2 | SUSE-SU-2020:0114-1 |
| SLES 15 | python | 2.7.17-7.32.2 | SUSE-SU-2020:0234-1 |
| SLES 15 | python-base | 2.7.17-7.32.1 | SUSE-SU-2020:0234-1 |
| SLES 15 | python3 +1 | 3.6.10-3.42.2 | SUSE-SU-2020:0114-1 |
| SLES 2 | python | 2.7.17-7.32.2 | SUSE-SU-2020:0234-1 |
| SLES 2 | python-base | 2.7.17-7.32.1 | SUSE-SU-2020:0234-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | fetchmail | 6.3.26-13.4 | openSUSE-SU-2024:10194-1 |
| openSUSE Tumbleweed | mozilla-nss | 3.26.2-1.1 | openSUSE-SU-2024:10451-1 |
| openSUSE Tumbleweed | python | 2.7.18-8.1 | openSUSE-SU-2024:11202-1 |
| openSUSE Tumbleweed | python-base | 2.7.12-1.4 | openSUSE-SU-2024:10536-1 |
| openSUSE Tumbleweed | python310 | 3.10.0rc1-4.2 | openSUSE-SU-2024:11283-1 |
| openSUSE Tumbleweed | python311 | 3.11.0b1-1.1 | openSUSE-SU-2024:12089-1 |
| openSUSE Tumbleweed | python312 | 3.12.0a7-1.1 | openSUSE-SU-2024:12910-1 |
| openSUSE Tumbleweed | python313 | 3.13.0~b3-1.1 | openSUSE-SU-2024:14109-1 |
| openSUSE Tumbleweed | python314 | 3.14.0~a1-1.1 | openSUSE-SU-2024:14434-1 |
| openSUSE Tumbleweed | python315 | 3.15.0~a1-1.1 | openSUSE-SU-2025:15713-1 |
| openSUSE Tumbleweed | python36 | 3.6.15-1.1 | openSUSE-SU-2024:11284-1 |
| openSUSE Tumbleweed | python38 | 3.8.12-1.2 | openSUSE-SU-2024:11285-1 |
| openSUSE Tumbleweed | python39 | 3.9.7-2.1 | openSUSE-SU-2024:11286-1 |
| openSUSE Leap 15.1 | python3 +1 | 3.6.10-lp151.6.7.1 | openSUSE-SU-2020:0086-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
SSL/TLS Version Detection
auxiliary/scanner/ssl/ssl_version
GitHub 1 repository
-
mpgn/BEAST-PoC ★ 80 · Mar 28, 2015
:muscle: Proof Of Concept of the BEAST attack against SSL/TLS CVE-2011-3389 :muscle:
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 34
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0508 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:0343 Red Hat Security Advisory: java-1.4.2-ibm-sap security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:0034 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:0006 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1380 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1384 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- VDE-2024-017 Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities CERT@VDE · May 18, 2026
- openSUSE-SU-2025:15713-1 python315-3.15.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-2358-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2356-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2368-1 lighttpd - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2398-1 curl - several Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-154-1 nss - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-400-1 pound - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11285-1 python38-3.8.12-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10451-1 libfreebl3-3.26.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14434-1 python314-3.14.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0086-1 Security update for python3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11286-1 python39-3.9.7-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12910-1 python312-3.12.0a7-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11283-1 python310-3.10.0rc1-4.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12089-1 python311-3.11.0b1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14109-1 python313-3.13.0~b3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0114-1 Security update for python3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11284-1 python36-3.6.15-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10194-1 fetchmail-6.3.26-13.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10536-1 libpython2_7-1_0-2.7.12-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-14-098-03 Siemens Ruggedcom WIN Products BEAST Attack Vulnerability CISA ICS & IT advisories · Jun 9, 2025
- openSUSE-SU-2024:11202-1 python-2.7.18-8.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2020:0234-1 Security update for python SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2023-1435 Hitachi Energy Relion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 12, 2023
- ICSA-19-192-04 ICSA-19-192-04 Siemens SIMATIC RF6XXR CISA ICS & IT advisories · Jul 9, 2019
- ICSMA-18-058-02 Philips Intellispace Portal ISP Vulnerabilities CISA ICS & IT advisories · Feb 27, 2018
References
- 74829 vdb-entry
- http://eprint.iacr.org/2004/111
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://isc.sans.edu/diary/SSL+TLS+part+3+/11635
- GLSA-201406-32 vendor-advisory
- 48692 third-party-advisory
- HPSBMU02799 vendor-advisory
- http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
- SSRT100805 vendor-advisory
- 55322 third-party-advisory
- http://support.apple.com/kb/HT5130
- https://bugzilla.redhat.com/show_bug.cgi?id=737506
- HPSBUX02730 vendor-advisory
- SUSE-SU-2012:0602 vendor-advisory
- 1025997 vdb-entry
- TA12-010A third-party-advisory
- APPLE-SA-2011-10-12-1 vendor-advisory
- SUSE-SU-2012:0114 vendor-advisory
- 49388 vdb-entry
- http://ekoparty.org/2011/juliano-rizzo.php
- http://downloads.asterisk.org/pub/security/AST-2016-001.html
- https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail
- RHSA-2013:1455 vendor-advisory
- 55351 third-party-advisory
- VU#864643 third-party-advisory
- APPLE-SA-2013-10-22-3 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- 49778 vdb-entry
- DSA-2398 vendor-advisory
- 48948 third-party-advisory
- http://support.apple.com/kb/HT6150
- APPLE-SA-2012-02-01-1 vendor-advisory
- http://technet.microsoft.com/security/advisory/2588513
- openSUSE-SU-2012:0063 vendor-advisory
- http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx
- RHSA-2011:1384 vendor-advisory
- http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx
- http://www.opera.com/docs/changelogs/windows/1151/
- openSUSE-SU-2012:0030 vendor-advisory
- http://eprint.iacr.org/2006/136
- 48915 third-party-advisory
- GLSA-201203-02 vendor-advisory
- SSRT100740 vendor-advisory
- http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html
- 48256 third-party-advisory
- APPLE-SA-2012-09-19-2 vendor-advisory
- 1026103 vdb-entry
- http://support.apple.com/kb/HT4999
- http://www.imperialviolet.org/2011/09/23/chromeandbeast.html
- http://support.apple.com/kb/HT5501
- http://www.insecure.cl/Beast-SSL.rar
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
- http://support.apple.com/kb/HT5001
- http://www.opera.com/docs/changelogs/mac/1160/
- http://curl.haxx.se/docs/adv_20120124B.html
- http://www.opera.com/support/kb/view/1004/
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
- 1026704 vdb-entry
- APPLE-SA-2012-07-25-2 vendor-advisory
- http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue