CVE-2013-1619

CVE-2013-1619 describes a timing side-channel vulnerability in the TLS implementation of GnuTLS versions before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7. This flaw, related to CVE-2013-0169, stems from improper handling of malformed CBC padding during MAC checks. An attacker could exploit this remotely with high attack complexity to potentially recover plaintext data through statistical analysis of timing differences. While the CVSS score is 4.0 (medium severity), indicating partial confidentiality and integrity impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and article.