Description
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-81-1 | openssl security update |
Debian DLA |
DLA-157-1 | openjdk-6 security update |
Debian DLA |
DLA-282-1 | lighttpd security update |
Debian DLA |
DLA-400-1 | pound security update |
Debian DSA |
DSA-3053-1 | openssl security update |
Debian DSA |
DSA-3144-1 | openjdk-7 security update |
Debian DSA |
DSA-3147-1 | openjdk-6 security update |
Debian DSA |
DSA-3253-1 | pound security update |
Debian DSA |
DSA-3489-1 | lighttpd security update |
Ubuntu USN |
USN-2486-1 | OpenJDK 6 vulnerabilities |
Ubuntu USN |
USN-2487-1 | OpenJDK 7 vulnerabilities |
References
History
Wed, 27 Nov 2024 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Subscriptions
Apple
Subscribe
Mac Os X
Subscribe
Debian
Subscribe
Debian Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Ibm
Subscribe
Aix
Subscribe
Vios
Subscribe
Mageia
Subscribe
Mageia
Subscribe
Netbsd
Subscribe
Netbsd
Subscribe
Novell
Subscribe
Suse Linux Enterprise Desktop
Subscribe
Suse Linux Enterprise Server
Subscribe
Suse Linux Enterprise Software Development Kit
Subscribe
Openssl
Subscribe
Openssl
Subscribe
Opensuse
Subscribe
Opensuse
Subscribe
Oracle
Subscribe
Database
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Desktop Supplementary
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Supplementary
Subscribe
Enterprise Linux Workstation
Subscribe
Enterprise Linux Workstation Supplementary
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Web Platform
Subscribe
Jboss Enterprise Web Server
Subscribe
Network Satellite
Subscribe
Openshift
Subscribe
Rhel Extras
Subscribe
Rhel Extras Oracle Java
Subscribe
Satellite
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-11-27T19:31:57.733Z
Reserved: 2014-05-14T00:00:00.000Z
Link: CVE-2014-3566
No data.
Status : Deferred
Published: 2014-10-15T00:55:02.137
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-3566
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN