The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curlUpgrade fetchmail | Aug 30, 2017 | Dec 21, 2012 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.29 | Jan 26, 2012 | Sep 6, 2011 |
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Cfnetworkssl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Curl | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Jul 16, 2012 | Sep 6, 2011 |
| Apple Osx Dovecot | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | Sep 6, 2011 |
| Apple Osx Securetransport | — | Apply OS X security update 2014-001 | Mar 3, 2014 | Sep 6, 2011 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk | Dec 1, 2016 | Sep 6, 2011 |
| Debian | — | Upgrade erlangUpgrade python2.7Upgrade lighttpdUpgrade poundUpgrade nssUpgrade bouncycastleUpgrade curlUpgrade asterisk | Jul 30, 2024 | Sep 6, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 16, 2015 |
| Freebsd | — | Upgrade asteriskUpgrade asterisk13Upgrade linux-operaUpgrade fetchmailUpgrade opera-develUpgrade asterisk11Upgrade opera | Dec 10, 2025 | Dec 13, 2011 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade dev-java/sun-jre-bin.Upgrade www-client/firefox.Upgrade dev-java/icedtea-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade app-emulation/emul-linux-x86-java.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-misc/curl.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-java/sun-jdk.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 6, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 31, 2013 | Sep 6, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 6, 2011 |
| Hpux | — | Update Jdk14.JDK14-PNV2 to the latest versionUpdate Jre14.JRE14-IPF64-HS to the latest versionUpdate Jre14.JRE14-PA20 to the latest versionUpdate Jdk14.JDK14-IPF32 to the latest versionUpdate Jdk14.JDK14-PA20 to the latest versionUpdate Jdk14.JDK14-COM to the latest versionUpdate Jdk14.JDK14-IPF64 to the latest versionUpdate Jre14.JRE14-PWV2 to the latest versionUpdate Jre14.JRE14-PA20W-HS to the latest versionUpdate Jre14.JRE14-IPF32-HS to the latest versionUpdate Jre14.JRE14-PA11 to the latest versionUpdate Jre14.JRE14-IPF32 to the latest versionUpdate Jdk14.JDK14-PWV2 to the latest versionUpdate Jre14.JRE14-COM-DOC to the latest versionUpdate Jre14.JRE14-PWV2-H to the latest versionUpdate Jpi14.JPI14-COM-DOC to the latest versionUpdate Jre14.JRE14-PA20-HS to the latest versionUpdate Jre14.JRE14-PNV2 to the latest versionUpdate Jre14.JRE14-COM to the latest versionUpdate Jpi14.JPI14-COM to the latest versionUpdate Jre14.JRE14-PA11-HS to the latest versionUpdate Jre14.JRE14-PNV2-H to the latest versionUpdate Jpi14.JPI14-PA11 to the latest versionUpdate Jdk14.JDK14-PA11 to the latest versionUpdate Jdk14.JDK14-DEMO to the latest versionUpdate Jre14.JRE14-IPF64 to the latest versionUpdate Jpi14.JPI14-IPF32 to the latest versionUpdate Jdk14.JDK14-PA20W to the latest versionUpdate Jre14.JRE14-PA20W to the latest version | Aug 11, 2017 | Sep 6, 2011 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2011 | Sep 6, 2011 |
| Oracle Missing Cpu Oct 2013 | — | Apply the October 2013 Critical Patch Update (CPU) for Oracle Database | May 2, 2014 | Sep 6, 2011 |
| Oracle Solaris | — | Upgrade mail/fetchmail to version 6.3.22-0.175.1.1.0.1.0 on Solaris 11.1Upgrade mail/fetchmail to version 6.3.22-0.175.0.12.0.3.0 on Solaris 11.0 | May 29, 2017 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-devel | Oct 16, 2024 | Sep 6, 2011 |
| Php | — | Upgrade to PHP version 5.4.0 | Jul 17, 2012 | Sep 6, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2011 |
| Suse | — | Upgrade mozilla-nssUpgrade python314-doc-devhelpUpgrade mozilla-nss-certsUpgrade libcurl4-openssl1Upgrade python3Upgrade python313-doc-devhelpUpgrade mozilla-nss-develUpgrade libsoftokn3-hmacUpgrade python-tkUpgrade libsoftokn3-x86Upgrade mozilla-nss-32bitUpgrade python3-testsuiteUpgrade python314-x86-64-v3Upgrade python314Upgrade python313-dbmUpgrade python314-baseUpgrade python313-cursesUpgrade java-1_4_2-ibm-sapUpgrade libpython3_6m1_0-32bitUpgrade libpython3_4m1_0Upgrade fetchmailUpgrade libcurl4-openssl1-32bitUpgrade python3-32bitUpgrade curl-openssl1Upgrade mozilla-nss-sysinit-32bitUpgrade fetchmailconfUpgrade libfreebl3Upgrade python3-dbmUpgrade libpython3_4m1_0-32bitUpgrade python313-develUpgrade python-develUpgrade python314-cursesUpgrade pythonUpgrade python313-docUpgrade python313-toolsUpgrade python-cursesUpgrade libpython3_13-1_0Upgrade java-1_4_2-ibm-sap-develUpgrade libpython2_7-1_0-32bitUpgrade python313-x86-64-v3Upgrade python-baseUpgrade python-xmlUpgrade python313-baseUpgrade python3-base-32bitUpgrade curlUpgrade libpython3_14-1_0-x86-64-v3Upgrade python3-baseUpgrade libcurl4-32bitUpgrade python314-base-x86-64-v3Upgrade mozilla-nss-x86Upgrade python3-idleUpgrade python3-develUpgrade libpython3_13-1_0-x86-64-v3Upgrade libfreebl3-hmacUpgrade mozilla-nss-toolsUpgrade libcurl-develUpgrade libcurl4Upgrade python313-tkUpgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade python36-baseUpgrade libcurl4-x86Upgrade python314-develUpgrade libpython3_14-1_0Upgrade python313-base-x86-64-v3Upgrade libfreebl3-x86Upgrade libpython3_6m1_0Upgrade mozilla-nss-sysinitUpgrade libsoftokn3-32bitUpgrade mozilla-nss-certs-32bitUpgrade python314-toolsUpgrade python36Upgrade python313Upgrade python-base-32bitUpgrade python313-idleUpgrade python3-cursesUpgrade libpython2_7-1_0Upgrade python314-idleUpgrade python314-docUpgrade python3-tkUpgrade libfreebl3-hmac-32bitUpgrade python3-toolsUpgrade python314-tkUpgrade python314-dbmUpgrade python-gdbmUpgrade libsoftokn3-hmac-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openjdk-6-jre-zeroUpgrade icedtea-netxUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-demoUpgrade icedtea-6-jre-cacaoUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-libUpgrade icedtea-pluginUpgrade icedtea6-pluginUpgrade openjdk-6-jdk | Nov 8, 2024 | Sep 6, 2011 |
| Vmsa 2012 0003 | — | Upgrade VMware ESX 3.5 to build number 604481 | Mar 23, 2012 | Sep 6, 2011 |
| Vmsa 2012 0005 | — | — | Mar 23, 2012 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub