The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade fetchmailUpgrade curl | Aug 30, 2017 | Dec 21, 2012 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.29 | Jan 26, 2012 | Sep 6, 2011 |
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Cfnetworkssl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Curl | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Jul 16, 2012 | Sep 6, 2011 |
| Apple Osx Dovecot | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Ruby | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Sep 27, 2012 | Sep 6, 2011 |
| Apple Osx Securetransport | — | Apply OS X security update 2014-001 | Mar 3, 2014 | Sep 6, 2011 |
| Centos_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-devel | Dec 1, 2016 | Sep 6, 2011 |
| Debian | — | Upgrade poundUpgrade python2.7Upgrade erlangUpgrade lighttpdUpgrade curlUpgrade asteriskUpgrade nssUpgrade bouncycastle | Jul 30, 2024 | Sep 6, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 16, 2015 |
| Freebsd | — | Upgrade asterisk11Upgrade opera-develUpgrade operaUpgrade fetchmailUpgrade asteriskUpgrade linux-operaUpgrade asterisk13 | Dec 10, 2025 | Dec 13, 2011 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/icedtea-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-java/sun-jre-bin.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade net-misc/curl.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-java/sun-jdk.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Sep 6, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 31, 2013 | Sep 6, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 6, 2011 |
| Hpux | — | Update Jre14.JRE14-PA20W-HS to the latest versionUpdate Jdk14.JDK14-COM to the latest versionUpdate Jre14.JRE14-PA20 to the latest versionUpdate Jdk14.JDK14-IPF64 to the latest versionUpdate Jdk14.JDK14-IPF32 to the latest versionUpdate Jre14.JRE14-IPF64-HS to the latest versionUpdate Jre14.JRE14-PWV2 to the latest versionUpdate Jdk14.JDK14-PNV2 to the latest versionUpdate Jdk14.JDK14-PA20 to the latest versionUpdate Jre14.JRE14-PNV2-H to the latest versionUpdate Jre14.JRE14-COM-DOC to the latest versionUpdate Jdk14.JDK14-PWV2 to the latest versionUpdate Jre14.JRE14-PWV2-H to the latest versionUpdate Jre14.JRE14-IPF32 to the latest versionUpdate Jpi14.JPI14-COM to the latest versionUpdate Jre14.JRE14-PA20W to the latest versionUpdate Jre14.JRE14-PA20-HS to the latest versionUpdate Jre14.JRE14-COM to the latest versionUpdate Jdk14.JDK14-DEMO to the latest versionUpdate Jpi14.JPI14-COM-DOC to the latest versionUpdate Jpi14.JPI14-PA11 to the latest versionUpdate Jre14.JRE14-PA11 to the latest versionUpdate Jre14.JRE14-IPF64 to the latest versionUpdate Jre14.JRE14-IPF32-HS to the latest versionUpdate Jre14.JRE14-PNV2 to the latest versionUpdate Jre14.JRE14-PA11-HS to the latest versionUpdate Jdk14.JDK14-PA20W to the latest versionUpdate Jdk14.JDK14-PA11 to the latest versionUpdate Jpi14.JPI14-IPF32 to the latest version | Aug 11, 2017 | Sep 6, 2011 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2011 | Sep 6, 2011 |
| Oracle Missing Cpu Oct 2013 | — | Apply the October 2013 Critical Patch Update (CPU) for Oracle Database | May 2, 2014 | Sep 6, 2011 |
| Oracle Solaris | — | Upgrade mail/fetchmail to version 6.3.22-0.175.1.1.0.1.0 on Solaris 11.1Upgrade mail/fetchmail to version 6.3.22-0.175.0.12.0.3.0 on Solaris 11.0 | May 29, 2017 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-src | Oct 16, 2024 | Sep 6, 2011 |
| Php | — | Upgrade to PHP version 5.4.0 | Jul 17, 2012 | Sep 6, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2011 |
| Suse | — | Upgrade libcurl4-32bitUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-openjdk-develUpgrade java-1_6_0-ibm-jdbcUpgrade libsoftokn3-32bitUpgrade java-1_6_0-openjdkUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade curl-debuginfoUpgrade python-base-debuginfoUpgrade libpython2_7-1_0-debuginfo-x86Upgrade java-1_6_0-sun-srcUpgrade mozilla-nss-certs-32bitUpgrade python3-2to3Upgrade python-32bitUpgrade libpython2_7-1_0-debuginfo-32bitUpgrade libpython2_7-1_0-debuginfoUpgrade libpython3_2mu1_0-debuginfoUpgrade python-xml-debuginfoUpgrade java-1_5_0-ibm-pluginUpgrade mozilla-nss-debuginfo-32bitUpgrade java-1_6_0-ibm-32bitUpgrade python3-toolsUpgrade mozilla-nss-toolsUpgrade java-1_5_0-ibm-fontsUpgrade mozilla-nss-sysinitUpgrade java-1_5_0-ibm-devel-32bitUpgrade libfreebl3-32bitUpgrade java-1_6_0-sun-alsaUpgrade mozilla-nss-x86Upgrade libcurl4-debuginfo-32bitUpgrade python3-base-debuginfoUpgrade java-1_6_0-openjdk-srcUpgrade python3-idleUpgrade curlUpgrade libfreebl3-debuginfoUpgrade python-base-debuginfo-32bitUpgrade mozilla-nss-tools-debuginfoUpgrade python-x86Upgrade python3-doc-pdfUpgrade java-1_6_0-openjdk-javadocUpgrade curl-x86Upgrade java-1_6_0-sunUpgrade java-1_6_0-ibm-develUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade curl-32bitUpgrade java-1_4_2-ibmUpgrade java-1_6_0-sun-develUpgrade libcurl4Upgrade java-1_6_0-ibmUpgrade libpython2_7-1_0-x86Upgrade libpython3_2mu1_0-debuginfo-32bitUpgrade libpython2_7-1_0Upgrade mozilla-nss-sysinit-debuginfoUpgrade java-1_4_2-ibm-pluginUpgrade python-gdbmUpgrade java-1_6_0-ibm-alsa-32bitUpgrade python3-baseUpgrade libsoftokn3Upgrade operaUpgrade libpython3_2mu1_0-debuginfo-x86Upgrade libcurl-develUpgrade python-doc-pdfUpgrade java-1_6_0-sun-demoUpgrade mozilla-nss-debugsourceUpgrade python3-develUpgrade java-1_6_0-ibm-64bitUpgrade python-base-32bitUpgrade python3-devel-debuginfoUpgrade libpython3_2mu1_0-32bitUpgrade java-1_6_0-sun-jdbcUpgrade python3-base-debugsourceUpgrade python3-xml-debuginfoUpgrade python3-xmlUpgrade java-1_5_0-ibm-32bitUpgrade libpython3_2mu1_0Upgrade java-1_5_0-ibm-64bitUpgrade java-1_4_2-ibm-sapUpgrade mozilla-nss-64bitUpgrade java-1_6_0-ibm-alsaUpgrade mozilla-nss-32bitUpgrade java-1_6_0-openjdk-demoUpgrade java-1_4_2-ibm-jdbcUpgrade java-1_5_0-ibm-srcUpgrade java-1_6_0-sun-pluginUpgrade java-1_4_2-ibm-develUpgrade java-1_5_0-ibm-alsa-32bitUpgrade python-cursesUpgrade python-64bitUpgrade python-idleUpgrade opera-gtkUpgrade python-demoUpgrade java-1_5_0-ibmUpgrade mozilla-nss-certsUpgrade java-1_5_0-ibm-alsaUpgrade libpython3_2mu1_0-x86Upgrade java-1_5_0-ibm-develUpgrade mozilla-nssUpgrade python-base-debugsourceUpgrade java-1_4_2-ibm-sap-develUpgrade python-base-debuginfo-x86Upgrade java-1_5_0-ibm-jdbcUpgrade python-docUpgrade java-1_5_0-ibm-demoUpgrade java-1_6_0-ibm-devel-32bitUpgrade python-develUpgrade libfreebl3-debuginfo-32bitUpgrade libfreebl3Upgrade mozilla-nss-sysinit-32bitUpgrade curl-64bitUpgrade libpython2_7-1_0-32bitUpgrade libcurl4-debuginfoUpgrade SUSE_SLES_SAP-releaseUpgrade python-baseUpgrade curl-develUpgrade python-tkUpgrade java-1_6_0-ibm-pluginUpgrade pythonUpgrade opera-kde4Upgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nss-debuginfoUpgrade mozilla-nss-develUpgrade python-base-x86Upgrade python3-docUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-certs-debuginfoUpgrade python-xml | Feb 17, 2015 | Sep 6, 2011 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jreUpgrade icedtea-netxUpgrade openjdk-6-demoUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-libUpgrade icedtea-pluginUpgrade icedtea6-pluginUpgrade openjdk-6-jdk | Nov 8, 2024 | Sep 6, 2011 |
| Vmsa 2012 0003 | — | Upgrade VMware ESX 3.5 to build number 604481 | Mar 23, 2012 | Sep 6, 2011 |
| Vmsa 2012 0005 | — | — | Mar 23, 2012 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub