CVE-2013-2566
Medium · 5.9CVSS
5.9
EPSS
84.4%
Published
Mar 15, 2013
CISA due date
—
The record
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:2 | firefox | 0 | 24.1.1-1.mga2 |
| Mageia:2 | firefox-l10n | 0 | 24.1.1-1.mga2 |
| Mageia:2 | nspr | 0 | 4.10.2-1.mga2 |
| Mageia:2 | nss | 0 | 3.15.3-1.mga2 |
| Mageia:2 | rootcerts | 0 | 20131111.00-1.mga2 |
| Mageia:3 | firefox | 0 | 24.1.1-1.mga3 |
| Mageia:3 | firefox-l10n | 0 | 24.1.1-1.mga3 |
| Mageia:3 | nspr | 0 | 4.10.2-1.mga3 |
| Mageia:3 | nss | 0 | 3.15.3-1.mga3 |
| Mageia:3 | rootcerts | 0 | 20131111.00-1.mga3 |
Related vulnerabilities
- CVE-2013-1710 The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x… Also affects firefox
- CVE-2013-1690 Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7… Also affects firefox
- CVE-2014-1574 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before… Also affects firefox
- CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in… Also affects firefox
- CVE-2014-1533 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before… Also affects firefox
- CVE-2014-1518 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before… Also affects firefox
- CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking… Also affects firefox
- CVE-2014-1510 The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4… Also affects firefox