The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curlUpgrade fetchmail | Aug 30, 2017 | Dec 21, 2012 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.29 | Jan 26, 2012 | Sep 6, 2011 |
| Apple Osx Addressbook | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Apache | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Cfnetworkssl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Curl | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Jul 16, 2012 | Sep 6, 2011 |
| Apple Osx Dovecot | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | Sep 6, 2011 |
| Apple Osx Securetransport | — | Apply OS X security update 2014-001 | Mar 3, 2014 | Sep 6, 2011 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-src | Dec 1, 2016 | Sep 6, 2011 |
| Debian | — | Upgrade curlUpgrade asteriskUpgrade bouncycastleUpgrade nssUpgrade poundUpgrade erlangUpgrade lighttpdUpgrade python2.7 | Jul 30, 2024 | Sep 6, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 16, 2015 |
| Freebsd | — | Upgrade opera-develUpgrade operaUpgrade asterisk11Upgrade asteriskUpgrade asterisk13Upgrade fetchmailUpgrade linux-opera | Dec 10, 2025 | Dec 13, 2011 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin.Upgrade www-client/icecat.Upgrade dev-java/icedtea-bin.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade dev-java/sun-jdk.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-misc/curl.Upgrade net-libs/xulrunner.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 6, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 31, 2013 | Sep 6, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 6, 2011 |
| Hpux | — | Update Jdk14.JDK14-COM to the latest versionUpdate Jdk14.JDK14-PNV2 to the latest versionUpdate Jdk14.JDK14-PA20 to the latest versionUpdate Jdk14.JDK14-IPF64 to the latest versionUpdate Jre14.JRE14-IPF64-HS to the latest versionUpdate Jre14.JRE14-PA20W-HS to the latest versionUpdate Jdk14.JDK14-IPF32 to the latest versionUpdate Jre14.JRE14-PWV2 to the latest versionUpdate Jre14.JRE14-PA20 to the latest versionUpdate Jpi14.JPI14-IPF32 to the latest versionUpdate Jre14.JRE14-PA20-HS to the latest versionUpdate Jdk14.JDK14-PA20W to the latest versionUpdate Jdk14.JDK14-PA11 to the latest versionUpdate Jre14.JRE14-COM to the latest versionUpdate Jdk14.JDK14-DEMO to the latest versionUpdate Jre14.JRE14-IPF64 to the latest versionUpdate Jre14.JRE14-PA11 to the latest versionUpdate Jre14.JRE14-COM-DOC to the latest versionUpdate Jre14.JRE14-PA11-HS to the latest versionUpdate Jpi14.JPI14-COM-DOC to the latest versionUpdate Jre14.JRE14-IPF32-HS to the latest versionUpdate Jpi14.JPI14-COM to the latest versionUpdate Jre14.JRE14-PA20W to the latest versionUpdate Jre14.JRE14-PWV2-H to the latest versionUpdate Jre14.JRE14-PNV2-H to the latest versionUpdate Jre14.JRE14-PNV2 to the latest versionUpdate Jdk14.JDK14-PWV2 to the latest versionUpdate Jpi14.JPI14-PA11 to the latest versionUpdate Jre14.JRE14-IPF32 to the latest version | Aug 11, 2017 | Sep 6, 2011 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2011 | Sep 6, 2011 |
| Oracle Missing Cpu Oct 2013 | — | Apply the October 2013 Critical Patch Update (CPU) for Oracle Database | May 2, 2014 | Sep 6, 2011 |
| Oracle Solaris | — | Upgrade mail/fetchmail to version 6.3.22-0.175.1.1.0.1.0 on Solaris 11.1Upgrade mail/fetchmail to version 6.3.22-0.175.0.12.0.3.0 on Solaris 11.0 | May 29, 2017 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demo | Oct 16, 2024 | Sep 6, 2011 |
| Php | — | Upgrade to PHP version 5.4.0 | Jul 17, 2012 | Sep 6, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2011 |
| Suse | — | Upgrade mozilla-nss-develUpgrade python3-dbmUpgrade mozilla-nssUpgrade python313-docUpgrade python-cursesUpgrade libpython3_4m1_0-32bitUpgrade python313-x86-64-v3Upgrade python314-cursesUpgrade mozilla-nss-32bitUpgrade python314-baseUpgrade python313-cursesUpgrade mozilla-nss-certsUpgrade python-xmlUpgrade python313-doc-devhelpUpgrade libcurl4-openssl1-32bitUpgrade libcurl4-openssl1Upgrade python-tkUpgrade libfreebl3Upgrade python3-32bitUpgrade python314-doc-devhelpUpgrade libsoftokn3-x86Upgrade python3Upgrade pythonUpgrade libpython2_7-1_0-32bitUpgrade libsoftokn3-hmacUpgrade python313-baseUpgrade python313-develUpgrade libpython3_6m1_0-32bitUpgrade java-1_4_2-ibm-sap-develUpgrade libpython3_13-1_0Upgrade python314Upgrade fetchmailconfUpgrade curl-openssl1Upgrade mozilla-nss-sysinit-32bitUpgrade libpython3_4m1_0Upgrade python-develUpgrade fetchmailUpgrade python313-toolsUpgrade python-baseUpgrade java-1_4_2-ibm-sapUpgrade python313-dbmUpgrade python314-x86-64-v3Upgrade python3-testsuiteUpgrade libpython3_14-1_0-x86-64-v3Upgrade mozilla-nss-toolsUpgrade python3-base-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmac-32bitUpgrade python313-idleUpgrade libcurl4Upgrade python314-docUpgrade libsoftokn3-32bitUpgrade python-base-32bitUpgrade python313Upgrade mozilla-nss-x86Upgrade python3-idleUpgrade libpython3_13-1_0-x86-64-v3Upgrade python313-tkUpgrade libcurl-develUpgrade python314-tkUpgrade python3-develUpgrade python314-toolsUpgrade python314-dbmUpgrade python313-base-x86-64-v3Upgrade python3-baseUpgrade python314-base-x86-64-v3Upgrade python3-cursesUpgrade libpython3_14-1_0Upgrade libpython2_7-1_0Upgrade python-gdbmUpgrade python314-develUpgrade python3-tkUpgrade libfreebl3-32bitUpgrade python314-idleUpgrade python36-baseUpgrade python36Upgrade libpython3_6m1_0Upgrade libfreebl3-hmacUpgrade mozilla-nss-certs-32bitUpgrade curlUpgrade libsoftokn3Upgrade libcurl4-x86Upgrade python3-toolsUpgrade libcurl4-32bitUpgrade libfreebl3-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-demoUpgrade openjdk-6-jre-headlessUpgrade icedtea-netxUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jreUpgrade icedtea-pluginUpgrade openjdk-6-jre-libUpgrade openjdk-6-jdkUpgrade icedtea6-plugin | Nov 8, 2024 | Sep 6, 2011 |
| Vmsa 2012 0003 | — | Upgrade VMware ESX 3.5 to build number 604481 | Mar 23, 2012 | Sep 6, 2011 |
| Vmsa 2012 0005 | — | — | Mar 23, 2012 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub