The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Apple
Subscribe
|
Mac Os X
Subscribe
|
|
Debian
Subscribe
|
Debian Linux
Subscribe
|
|
Fedoraproject
Subscribe
|
Fedora
Subscribe
|
|
Ibm
Subscribe
|
|
|
Mageia
Subscribe
|
Mageia
Subscribe
|
|
Netbsd
Subscribe
|
Netbsd
Subscribe
|
|
Novell
Subscribe
|
|
|
Openssl
Subscribe
|
Openssl
Subscribe
|
|
Opensuse
Subscribe
|
Opensuse
Subscribe
|
|
Oracle
Subscribe
|
Database
Subscribe
|
|
Redhat
Subscribe
|
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Desktop Supplementary
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Supplementary
Subscribe
Enterprise Linux Workstation
Subscribe
Enterprise Linux Workstation Supplementary
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Web Platform
Subscribe
Jboss Enterprise Web Server
Subscribe
Network Satellite
Subscribe
Openshift
Subscribe
Rhel Extras
Subscribe
Rhel Extras Oracle Java
Subscribe
Satellite
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-81-1 | openssl security update |
Debian DLA |
DLA-157-1 | openjdk-6 security update |
Debian DLA |
DLA-282-1 | lighttpd security update |
Debian DLA |
DLA-400-1 | pound security update |
Debian DSA |
DSA-3053-1 | openssl security update |
Debian DSA |
DSA-3144-1 | openjdk-7 security update |
Debian DSA |
DSA-3147-1 | openjdk-6 security update |
Debian DSA |
DSA-3253-1 | pound security update |
Debian DSA |
DSA-3489-1 | lighttpd security update |
Ubuntu USN |
USN-2486-1 | OpenJDK 6 vulnerabilities |
Ubuntu USN |
USN-2487-1 | OpenJDK 7 vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 27 Nov 2024 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-11-27T19:31:57.733Z
Reserved: 2014-05-14T00:00:00.000Z
Link: CVE-2014-3566
No data.
Status : Deferred
Published: 2014-10-15T00:55:02.137
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-3566
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN