The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DLA-81-1 | openssl security update |
![]() |
DLA-157-1 | openjdk-6 security update |
![]() |
DLA-282-1 | lighttpd security update |
![]() |
DLA-400-1 | pound security update |
![]() |
DSA-3053-1 | openssl security update |
![]() |
DSA-3144-1 | openjdk-7 security update |
![]() |
DSA-3147-1 | openjdk-6 security update |
![]() |
DSA-3253-1 | pound security update |
![]() |
DSA-3489-1 | lighttpd security update |
![]() |
USN-2486-1 | OpenJDK 6 vulnerabilities |
![]() |
USN-2487-1 | OpenJDK 7 vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 27 Nov 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|

Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-11-27T19:31:57.733Z
Reserved: 2014-05-14T00:00:00
Link: CVE-2014-3566

No data.

Status : Deferred
Published: 2014-10-15T00:55:02.137
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-3566


No data.