The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade fetchmailUpgrade curl | Aug 30, 2017 | Dec 21, 2012 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.29 | Jan 26, 2012 | Sep 6, 2011 |
| Apple Osx Addressbook | — | Upgrade macOS to the latest versionApply OS X security update 2012-001 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Apache | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Cfnetworkssl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Curl | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Jul 16, 2012 | Sep 6, 2011 |
| Apple Osx Dovecot | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Feb 3, 2012 | Sep 6, 2011 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Sep 6, 2011 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Sep 6, 2011 |
| Apple Osx Ruby | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Sep 27, 2012 | Sep 6, 2011 |
| Apple Osx Securetransport | — | Apply OS X security update 2014-001 | Mar 3, 2014 | Sep 6, 2011 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Sep 6, 2011 |
| Debian | — | Upgrade lighttpdUpgrade python2.7Upgrade poundUpgrade erlangUpgrade nssUpgrade curlUpgrade asteriskUpgrade bouncycastle | Jul 30, 2024 | Sep 6, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 16, 2015 |
| Freebsd | — | Upgrade opera-develUpgrade asterisk11Upgrade operaUpgrade asterisk13Upgrade asteriskUpgrade linux-operaUpgrade fetchmail | Dec 10, 2025 | Dec 13, 2011 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade dev-java/icedtea-bin.Upgrade dev-java/sun-jre-bin.Upgrade mail-client/thunderbird.Upgrade app-emulation/emul-linux-x86-java.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-misc/curl.Upgrade net-libs/xulrunner-bin.Upgrade dev-java/sun-jdk.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Sep 6, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 31, 2013 | Sep 6, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Sep 6, 2011 |
| Hpux | — | Update Jre14.JRE14-PWV2-H to the latest versionUpdate Jre14.JRE14-COM to the latest versionUpdate Jpi14.JPI14-COM to the latest versionUpdate Jre14.JRE14-IPF64 to the latest versionUpdate Jdk14.JDK14-PA20W to the latest versionUpdate Jre14.JRE14-PNV2 to the latest versionUpdate Jpi14.JPI14-COM-DOC to the latest versionUpdate Jre14.JRE14-PA20-HS to the latest versionUpdate Jdk14.JDK14-DEMO to the latest versionUpdate Jpi14.JPI14-PA11 to the latest versionUpdate Jdk14.JDK14-PWV2 to the latest versionUpdate Jre14.JRE14-PNV2-H to the latest versionUpdate Jre14.JRE14-COM-DOC to the latest versionUpdate Jre14.JRE14-PA20W to the latest versionUpdate Jpi14.JPI14-IPF32 to the latest versionUpdate Jre14.JRE14-IPF32-HS to the latest versionUpdate Jre14.JRE14-PA11 to the latest versionUpdate Jre14.JRE14-IPF32 to the latest versionUpdate Jdk14.JDK14-PA11 to the latest versionUpdate Jre14.JRE14-PA11-HS to the latest versionUpdate Jdk14.JDK14-IPF64 to the latest versionUpdate Jre14.JRE14-PA20 to the latest versionUpdate Jdk14.JDK14-COM to the latest versionUpdate Jdk14.JDK14-PA20 to the latest versionUpdate Jdk14.JDK14-PNV2 to the latest versionUpdate Jdk14.JDK14-IPF32 to the latest versionUpdate Jre14.JRE14-IPF64-HS to the latest versionUpdate Jre14.JRE14-PA20W-HS to the latest versionUpdate Jre14.JRE14-PWV2 to the latest version | Aug 11, 2017 | Sep 6, 2011 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2011 | Sep 6, 2011 |
| Oracle Missing Cpu Oct 2013 | — | Apply the October 2013 Critical Patch Update (CPU) for Oracle Database | May 2, 2014 | Sep 6, 2011 |
| Oracle Solaris | — | Upgrade mail/fetchmail to version 6.3.22-0.175.1.1.0.1.0 on Solaris 11.1Upgrade mail/fetchmail to version 6.3.22-0.175.0.12.0.3.0 on Solaris 11.0 | May 29, 2017 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-src | Oct 16, 2024 | Sep 6, 2011 |
| Php | — | Upgrade to PHP version 5.4.0 | Jul 17, 2012 | Sep 6, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2011 |
| Suse | — | Upgrade python314-cursesUpgrade python3Upgrade mozilla-nssUpgrade python3-dbmUpgrade python314Upgrade python-xmlUpgrade python-baseUpgrade python313-doc-devhelpUpgrade libpython3_6m1_0-32bitUpgrade libsoftokn3-hmacUpgrade python314-baseUpgrade mozilla-nss-certsUpgrade python314-x86-64-v3Upgrade python-tkUpgrade python3-testsuiteUpgrade python313-dbmUpgrade java-1_4_2-ibm-sapUpgrade libcurl4-openssl1Upgrade pythonUpgrade python313-x86-64-v3Upgrade mozilla-nss-develUpgrade java-1_4_2-ibm-sap-develUpgrade libpython2_7-1_0-32bitUpgrade mozilla-nss-32bitUpgrade fetchmailconfUpgrade mozilla-nss-sysinit-32bitUpgrade python3-32bitUpgrade python313-cursesUpgrade libpython3_4m1_0Upgrade fetchmailUpgrade libfreebl3Upgrade libcurl4-openssl1-32bitUpgrade curl-openssl1Upgrade python313-develUpgrade python-develUpgrade python314-doc-devhelpUpgrade python313-toolsUpgrade libpython3_13-1_0Upgrade libsoftokn3-x86Upgrade python-cursesUpgrade python313-docUpgrade python313-baseUpgrade libpython3_4m1_0-32bitUpgrade python-base-32bitUpgrade python36Upgrade libcurl-develUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nss-toolsUpgrade python36-baseUpgrade libcurl4-32bitUpgrade python3-idleUpgrade python3-toolsUpgrade mozilla-nss-certs-32bitUpgrade python314-docUpgrade libcurl4Upgrade python313-idleUpgrade libsoftokn3-32bitUpgrade python314-base-x86-64-v3Upgrade libpython3_13-1_0-x86-64-v3Upgrade python314-dbmUpgrade python314-toolsUpgrade python3-cursesUpgrade libcurl4-x86Upgrade python-gdbmUpgrade libpython2_7-1_0Upgrade libpython3_14-1_0Upgrade python3-tkUpgrade libfreebl3-32bitUpgrade python313Upgrade python313-tkUpgrade libfreebl3-hmac-32bitUpgrade python314-idleUpgrade python314-tkUpgrade python3-develUpgrade python3-baseUpgrade python3-base-32bitUpgrade mozilla-nss-sysinitUpgrade libpython3_6m1_0Upgrade libsoftokn3Upgrade libfreebl3-x86Upgrade python313-base-x86-64-v3Upgrade libpython3_14-1_0-x86-64-v3Upgrade curlUpgrade libfreebl3-hmacUpgrade python314-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openjdk-6-jreUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-demoUpgrade icedtea-netxUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jre-headlessUpgrade icedtea-6-jre-cacaoUpgrade icedtea-pluginUpgrade openjdk-6-jre-libUpgrade openjdk-6-jdkUpgrade icedtea6-plugin | Nov 8, 2024 | Sep 6, 2011 |
| Vmsa 2012 0003 | — | Upgrade VMware ESX 3.5 to build number 604481 | Mar 23, 2012 | Sep 6, 2011 |
| Vmsa 2012 0005 | — | — | Mar 23, 2012 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub