Chain
CVE-2013-0169 family: incomplete fixes (2013–2018)
4 CVEs over 2 generations, 8 Feb 2013 to 28 Jul 2018.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2013-01698 Feb 2013 First in the chain
- CVE-2013-21163 Jul 2013 incomplete fix for CVE-2013-0169
- CVE-2016-21075 May 2016 incomplete fix for CVE-2013-0169
- CVE-2018-049728 Jul 2018 incomplete fix for CVE-2013-0169
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2013-0169 | 8 Feb 2013 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other… | First in chain | 24.7 |
| CVE-2013-2116 | 3 Jul 2013 | The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a… | CVE-2013-0169 · incomplete fix · High | 18.0 |
| CVE-2016-2107 | 5 May 2016 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during… | CVE-2013-0169 · incomplete fix · High | 25.6 |
| CVE-2018-0497 | 28 Jul 2018 | ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext… | CVE-2013-0169 · incomplete fix · High | 17.3 |