Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 17 products
This addresses the following vulnerabilities: CVE-2010-4756 CVE-2011-3389 CVE-2013-4392 CVE-2015-3276 CVE-2017-14159 CVE-2017-17740 CVE-2018-20796 CVE-2018-5709 CVE-2018-6829 CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024 CVE-2019-1010025 CVE-2019-9192 CVE-2020-15719 9/19
Post summary
The post lists several CVE identifiers without providing any additional details such as exploits, patches, or technical specifics.
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 10.04 | - | - |
| OS | canonical | ubuntu_linux | 10.10 | - | - |
| OS | canonical | ubuntu_linux | 11.04 | - | - |
| OS | canonical | ubuntu_linux | 11.10 | - | - |
| OS | debian | debian_linux | 5.0 | - | - |
| OS | debian | debian_linux | 6.0 | - | - |
| App | chrome | - | - | - | |
| App | haxx | curl | - | - | - |
| App | microsoft | internet_explorer | - | - | - |
| OS | microsoft | windows | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | opera | opera_browser | - | - | - |
| OS | redhat | enterprise_linux_desktop | 5.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 6.0 | - | - |
| OS | redhat | enterprise_linux_eus | 6.2 | - | - |
| OS | redhat | enterprise_linux_server | 5.0 | - | - |
| OS | redhat | enterprise_linux_server | 6.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.2 | - | - |
| OS | redhat | enterprise_linux_workstation | 5.0 | - | - |
| OS | redhat | enterprise_linux_workstation | 6.0 | - | - |
| HW | siemens | simatic_rf615r | - | - | - |
| OS | siemens | simatic_rf615r_firmware | - | - | - |
| HW | siemens | simatic_rf68xr | - | - | - |
| OS | siemens | simatic_rf68xr_firmware | - | - | - |