CVE-2013-0169

CVE-2013-0169, known as "Lucky Thirteen," is a timing side-channel vulnerability affecting TLS 1.1/1.2 and DTLS 1.0/1.2 implementations in products like OpenSSL, OpenJDK, and PolarSSL. It allows remote attackers to perform plaintext-recovery attacks by analyzing timing differences during the processing of malformed CBC padding. The vulnerability has a CVSS score of 2.6 (low severity), indicating a network attack vector with high attack complexity and a partial impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.