View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2013-1620 severity moderate: SUSE including 167 source package names (libfreebl3-3.101.2-slfo.1.1_1.6, libfreebl3-3.112-160000.2.2, …), 405 product×package rows across 48 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (48 product lines)): Fixed 242, Known Not Affected 163.
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.