Description
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bouncycastle | 1.48+dfsg-2 | — |
| Debian 14 | gnutls28 | 3.0.22-3 | — |
| Debian 14 | nss | 2:3.14.3-1 | — |
| Debian 14 | openssl | 1.0.1e-1 | — |
| Debian 13 | bouncycastle | 1.48+dfsg-2 | — |
| Debian 13 | gnutls28 | 3.0.22-3 | — |
| Debian 13 | nss | 2:3.14.3-1 | — |
| Debian 13 | openssl | 1.0.1e-1 | — |
| Debian 12 | bouncycastle | 1.48+dfsg-2 | — |
| Debian 12 | gnutls28 | 3.0.22-3 | — |
| Debian 12 | nss | 2:3.14.3-1 | — |
| Debian 12 | openssl | 1.0.1e-1 | — |
| Debian 6.0 | openssl | 0.9.8o-4squeeze14 | DSA-2621-1 |
| Debian 6.0 | polarssl | 0.12.1-1squeeze1 | DSA-2622-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openssl098 | 0.9.8o-7ubuntu3.2.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.2-1jpp.1.el6_4 | RHSA-2013:0855 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.13.2-1jpp.1.el6_4 | RHSA-2013:0823 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.56.1.11.8.el6_3 | RHSA-2013:0273 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.41-1jpp.1.el6_3 | RHSA-2013:0531 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.4.2-1jpp.1.el6_4 | RHSA-2013:0822 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.9-2.3.7.1.el6_3 | RHSA-2013:0275 |
| RHEL 6 | java-1.7.0-oracle +5 | 1:1.7.0.15-1jpp.1.el6_3 | RHSA-2013:0532 |
| RHEL 6 | openssl +3 | 1.0.0-27.el6_4.2 | RHSA-2013:0587 |
| RHEL 6 | rhev-hypervisor6 | 6.4-20130306.2.el6_4 | RHSA-2013:0636 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.2-1jpp.1.el5_9 | RHSA-2013:0855 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.13.2-1jpp.1.el5_9 | RHSA-2013:0823 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.35.1.11.8.el5_9 | RHSA-2013:0274 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.41-1jpp.1.el5_9 | RHSA-2013:0531 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.4.2-1jpp.1.el5_9 | RHSA-2013:0822 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.9-2.3.7.1.el5_9 | RHSA-2013:0275 |
| RHEL 5 | java-1.7.0-oracle +5 | 1:1.7.0.15-1jpp.1.el5_9 | RHSA-2013:0532 |
| RHEL 5 | openssl +2 | 0.9.8e-26.el5_9.1 | RHSA-2013:0587 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 3 | rhevm-spice-client +4 | 3.3-12.el6_5 | RHSA-2014:0416 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1456, RHSA-2013:1455 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
wearohat/lucky13 ★ 4 · Apr 1, 2025
Exploit for cve-2013-0169
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 27
- WID-SEC-2026-4026 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2014:0416 Red Hat Security Advisory: rhevm-spice-client security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0636 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0587 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:1456 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0855 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0822 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0823 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0532 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0275 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0531 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0274 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:0273 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2621-1 openssl - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2622-1 polarssl - several Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-403 Forbidden-1 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- VDE-2021-027 Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service CERT@VDE · May 14, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ICSA-25-105-08 ABB M2M Gateway CISA ICS & IT advisories · Apr 7, 2025
- 2NGA002579 ABB Arctic communication solution ARM600 Vulnerabilities ABB PSIRT · Apr 7, 2025
- WID-SEC-2023-1435 Hitachi Energy Relion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 12, 2023
- ICSA-22-097-01 Pepperl+Fuchs WirelessHART-Gateway CISA ICS & IT advisories · Apr 7, 2022
- ICSA-19-192-04 ICSA-19-192-04 Siemens SIMATIC RF6XXR CISA ICS & IT advisories · Jul 9, 2019
References
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1518-1] polarssl security update mailing-list
- http://www.matrixssl.org/news.html
- RHSA-2013:0587 vendor-advisory
- GLSA-201406-32 vendor-advisory
- FEDORA-2013-4403 vendor-advisory
- TA13-051A third-party-advisory
- oval:org.mitre.oval:def:19016 vdb-entry signature
- MDVSA-2013:095 vendor-advisory
- 55139 third-party-advisory
- 55322 third-party-advisory
- oval:org.mitre.oval:def:19608 vdb-entry signature
- http://www.openssl.org/news/secadv_20130204.txt
- http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084
- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html
- openSUSE-SU-2013:0378 vendor-advisory
- DSA-2622 vendor-advisory
- 57778 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21644047
- [oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations mailing-list
- RHSA-2013:1455 vendor-advisory
- 55351 third-party-advisory
- HPSBUX02856 vendor-advisory
- https://puppet.com/security/cve/cve-2013-0169
- SSRT101289 vendor-advisory
- openSUSE-SU-2016:0640 vendor-advisory
- SSRT101108 vendor-advisory
- SUSE-SU-2013:0328 vendor-advisory
- RHSA-2013:0833 vendor-advisory
- USN-1735-1 vendor-advisory
- SUSE-SU-2014:0320 vendor-advisory
- HPSBUX02857 vendor-advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001
- 53623 third-party-advisory
- SUSE-SU-2013:0701 vendor-advisory
- VU#737740 third-party-advisory
- oval:org.mitre.oval:def:19424 vdb-entry signature
- DSA-2621 vendor-advisory
- RHSA-2013:0783 vendor-advisory
- HPSBMU02874 vendor-advisory
- APPLE-SA-2013-09-12-1 vendor-advisory
- 55108 third-party-advisory
- RHSA-2013:0782 vendor-advisory
- SUSE-SU-2015:0578 vendor-advisory
- openSUSE-SU-2013:0375 vendor-advisory
- https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
- oval:org.mitre.oval:def:19540 vdb-entry signature
- 1029190 vdb-entry
- oval:org.mitre.oval:def:18841 vdb-entry signature
- http://www.splunk.com/view/SP-CAAAHXG
- RHSA-2013:1456 vendor-advisory
- http://support.apple.com/kb/HT5880
- 55350 third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf