Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3566
HistoryOct 15, 2014 - 12:55 a.m.

CVE-2014-3566

2014-10-1500:55:02
CWE-310
[email protected]
web.nvd.nist.gov
649
5
cve-2014-3566
ssl protocol
openssl
vulnerability
poodle issue
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the “POODLE” issue.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch5
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_desktop_supplementaryMatch5.0
OR
redhatenterprise_linux_desktop_supplementaryMatch6.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_supplementaryMatch5.0
OR
redhatenterprise_linux_server_supplementaryMatch6.0
OR
redhatenterprise_linux_server_supplementaryMatch7.0
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
OR
redhatenterprise_linux_workstation_supplementaryMatch6.0
OR
redhatenterprise_linux_workstation_supplementaryMatch7.0
Node
ibmaixMatch5.3
OR
ibmaixMatch6.1
OR
ibmaixMatch7.1
Node
applemac_os_xRange≤10.10.1
Node
mageiamageiaMatch3.0
OR
mageiamageiaMatch4.0
Node
novellsuse_linux_enterprise_desktopMatch9.0
OR
novellsuse_linux_enterprise_desktopMatch10.0
OR
novellsuse_linux_enterprise_desktopMatch11.0
OR
novellsuse_linux_enterprise_desktopMatch12.0
Node
novellsuse_linux_enterprise_software_development_kitMatch11.0sp3
OR
novellsuse_linux_enterprise_software_development_kitMatch12.0
OR
novellsuse_linux_enterprise_serverMatch11.0sp3
OR
novellsuse_linux_enterprise_serverMatch11.0sp3vmware
OR
novellsuse_linux_enterprise_serverMatch12.0
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1
Node
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
Node
opensslopensslMatch0.9.8
OR
opensslopensslMatch0.9.8a
OR
opensslopensslMatch0.9.8b
OR
opensslopensslMatch0.9.8c
OR
opensslopensslMatch0.9.8d
OR
opensslopensslMatch0.9.8e
OR
opensslopensslMatch0.9.8f
OR
opensslopensslMatch0.9.8g
OR
opensslopensslMatch0.9.8h
OR
opensslopensslMatch0.9.8i
OR
opensslopensslMatch0.9.8j
OR
opensslopensslMatch0.9.8k
OR
opensslopensslMatch0.9.8l
OR
opensslopensslMatch0.9.8m
OR
opensslopensslMatch0.9.8mbeta1
OR
opensslopensslMatch0.9.8n
OR
opensslopensslMatch0.9.8o
OR
opensslopensslMatch0.9.8p
OR
opensslopensslMatch0.9.8q
OR
opensslopensslMatch0.9.8r
OR
opensslopensslMatch0.9.8s
OR
opensslopensslMatch0.9.8t
OR
opensslopensslMatch0.9.8u
OR
opensslopensslMatch0.9.8v
OR
opensslopensslMatch0.9.8w
OR
opensslopensslMatch0.9.8x
OR
opensslopensslMatch0.9.8y
OR
opensslopensslMatch0.9.8z
OR
opensslopensslMatch0.9.8za
OR
opensslopensslMatch0.9.8zb
OR
opensslopensslMatch1.0.0
OR
opensslopensslMatch1.0.0beta1
OR
opensslopensslMatch1.0.0beta2
OR
opensslopensslMatch1.0.0beta3
OR
opensslopensslMatch1.0.0beta4
OR
opensslopensslMatch1.0.0beta5
OR
opensslopensslMatch1.0.0a
OR
opensslopensslMatch1.0.0b
OR
opensslopensslMatch1.0.0c
OR
opensslopensslMatch1.0.0d
OR
opensslopensslMatch1.0.0e
OR
opensslopensslMatch1.0.0f
OR
opensslopensslMatch1.0.0g
OR
opensslopensslMatch1.0.0h
OR
opensslopensslMatch1.0.0i
OR
opensslopensslMatch1.0.0j
OR
opensslopensslMatch1.0.0k
OR
opensslopensslMatch1.0.0l
OR
opensslopensslMatch1.0.0m
OR
opensslopensslMatch1.0.0n
OR
opensslopensslMatch1.0.1
OR
opensslopensslMatch1.0.1beta1
OR
opensslopensslMatch1.0.1beta2
OR
opensslopensslMatch1.0.1beta3
OR
opensslopensslMatch1.0.1a
OR
opensslopensslMatch1.0.1b
OR
opensslopensslMatch1.0.1c
OR
opensslopensslMatch1.0.1d
OR
opensslopensslMatch1.0.1e
OR
opensslopensslMatch1.0.1f
OR
opensslopensslMatch1.0.1g
OR
opensslopensslMatch1.0.1h
OR
opensslopensslMatch1.0.1i
Node
ibmviosMatch2.2.0.10
OR
ibmviosMatch2.2.0.11
OR
ibmviosMatch2.2.0.12
OR
ibmviosMatch2.2.0.13
OR
ibmviosMatch2.2.1.0
OR
ibmviosMatch2.2.1.1
OR
ibmviosMatch2.2.1.3
OR
ibmviosMatch2.2.1.4
OR
ibmviosMatch2.2.1.5
OR
ibmviosMatch2.2.1.6
OR
ibmviosMatch2.2.1.7
OR
ibmviosMatch2.2.1.8
OR
ibmviosMatch2.2.1.9
OR
ibmviosMatch2.2.2.0
OR
ibmviosMatch2.2.2.1
OR
ibmviosMatch2.2.2.2
OR
ibmviosMatch2.2.2.3
OR
ibmviosMatch2.2.2.4
OR
ibmviosMatch2.2.2.5
OR
ibmviosMatch2.2.3.0
OR
ibmviosMatch2.2.3.1
OR
ibmviosMatch2.2.3.2
OR
ibmviosMatch2.2.3.3
OR
ibmviosMatch2.2.3.4
Node
netbsdnetbsdMatch5.1
OR
netbsdnetbsdMatch5.1.1
OR
netbsdnetbsdMatch5.1.2
OR
netbsdnetbsdMatch5.1.3
OR
netbsdnetbsdMatch5.1.4
OR
netbsdnetbsdMatch5.2
OR
netbsdnetbsdMatch5.2.1
OR
netbsdnetbsdMatch5.2.2
OR
netbsdnetbsdMatch6.0
OR
netbsdnetbsdMatch6.0beta
OR
netbsdnetbsdMatch6.0.1
OR
netbsdnetbsdMatch6.0.2
OR
netbsdnetbsdMatch6.0.3
OR
netbsdnetbsdMatch6.0.4
OR
netbsdnetbsdMatch6.0.5
OR
netbsdnetbsdMatch6.0.6
OR
netbsdnetbsdMatch6.1
OR
netbsdnetbsdMatch6.1.1
OR
netbsdnetbsdMatch6.1.2
OR
netbsdnetbsdMatch6.1.3
OR
netbsdnetbsdMatch6.1.4
OR
netbsdnetbsdMatch6.1.5
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
oracledatabaseMatch11.2.0.4
OR
oracledatabaseMatch12.1.0.2
CPENameOperatorVersion
redhat:enterprise_linuxredhat enterprise linuxeq5
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq6.0
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq7.0
redhat:enterprise_linux_desktop_supplementaryredhat enterprise linux desktop supplementaryeq5.0
redhat:enterprise_linux_desktop_supplementaryredhat enterprise linux desktop supplementaryeq6.0
redhat:enterprise_linux_serverredhat enterprise linux servereq6.0
redhat:enterprise_linux_serverredhat enterprise linux servereq7.0
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq5.0
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq6.0
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq7.0
Rows per page:
1-10 of 141

References

Social References

More

Related

freebsd 2
redhat 3
nessus 38
openvas 20
centos 1
hackerone 4
paloalto 1
threatpost 1
fedora 12
ubuntucve 1
debiancve 1
ibm 94
securityvulns 4
hp 1
veracode 3
nvd 1
aix 1
debian 1
fortinet 1
checkpoint_security 1
huawei 1
osv 2
prion 1
cert 1
f5 1
seebug 1
amazon 1
citrix 1
freebsd
freebsd
davmail -- fix potential CVE-2014-3566 vulnerability (POODLE)
2014-10-27 00:00:00
asterisk -- Asterisk Susceptibility to POODLE Vulnerability
2014-10-20 00:00:00
redhat
redhat
(RHSA-2014:1948) Important: nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
(RHSA-2015:1545) Important: node.js security update
2015-08-04 00:00:00
(RHSA-2015:1546) Important: node.js security update
2015-08-04 00:00:00
nessus
nessus
CentOS 5 / 6 / 7 : nss (CESA-2014:1948) (POODLE)
2014-12-04 00:00:00
Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20141016) (POODLE)
2014-10-17 00:00:00
openSUSE Security Update : libserf (openSUSE-SU-2014:1395-1) (POODLE)
2014-11-13 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-426)
2015-09-08 00:00:00
Fedora Update for claws-mail-plugins FEDORA-2014-14234
2014-11-11 00:00:00
Fedora Update for libetpan FEDORA-2014-14234
2014-11-11 00:00:00
centos
centos
nss security update
2014-12-03 22:45:56
hackerone
hackerone
X (Formerly Twitter): POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)
2017-11-09 21:44:16
Semrush: SSLv3 Poodle Attack on Ip Of semrush
2018-02-22 16:43:36
MariaDB: smtp service vulnerable to POODLE SSLv3
2019-03-24 06:26:55
paloalto
paloalto
SSL 3.0 MITM Attack
2014-10-20 07:00:00
threatpost
threatpost
OpenSSL Releases Patch for POODLE Attack
2014-10-16 10:29:53
fedora
fedora
[SECURITY] Fedora 20 Update: subscription-manager-1.13.6-1.fc20
2014-11-07 02:36:51
[SECURITY] Fedora 20 Update: libuv-0.10.29-1.fc20
2014-12-15 04:34:00
[SECURITY] Fedora 19 Update: nodejs-0.10.33-1.fc19
2014-12-15 04:35:14
ubuntucve
ubuntucve
CVE-2014-3566
2014-10-14 00:00:00
debiancve
debiancve
CVE-2014-3566
2014-10-15 00:55:02
ibm
ibm
Security Bulletin: Vulnerability in SSLv3 affects IBM Intelligent Operations Center and related products, and Integrated Information Core (CVE-2014-3566)
2022-08-19 18:23:31
Security Bulletin: Vulnerability in SSLv3 affects IBM Tivoli Access Manager for e-business (CVE-2014-3566)
2018-06-16 21:21:08
Security Bulletin: A security vulnerability has been identified in IBM Tivoli Directory Server shipped with AIX/VIOS (CVE-2014-3566)
2021-09-15 12:14:52
securityvulns
securityvulns
APPLE-SA-2014-10-16-2 Security Update 2014-005
2014-10-18 00:00:00
APPLE-SA-2014-10-16-5 OS X Server v2.2.5
2014-10-18 00:00:00
TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack
2014-10-18 00:00:00
hp
hp
HPSBPI03360 rev.5 - HP LaserJet Printers and MFPs, HP OfficeJet Printers and MFPs, and HP JetDirect Networking cards using OpenSSL, Remote Disclosure of Information
2015-06-19 00:00:00
veracode
veracode
POODLE Attack
2017-05-03 05:12:56
Information Disclosure
2019-01-15 08:54:41
POODLE Attack
2017-04-27 06:54:17
nvd
nvd
CVE-2014-3566
2014-10-15 00:55:02
aix
aix
Vulnerability in SSLv3 affects AIX,Vulnerability in SSLv3 affects VIOS
2015-06-17 09:52:06
debian
debian
[SECURITY] [DSA 3489-1] lighttpd security update
2016-02-23 18:26:27
fortinet
fortinet
SSL v3 "POODLE" Vulnerability
2014-10-15 00:00:00
checkpoint_security
checkpoint_security
Check Point response to the POODLE Bites vulnerability (CVE-2014-3566)
2014-10-13 21:00:00
huawei
huawei
Security Advisory-SSLv3 POODLE Vulnerability in Huawei Products
2014-12-15 00:00:00
osv
osv
lighttpd - security update
2016-02-23 00:00:00
lighttpd - security update
2015-07-25 00:00:00
prion
prion
Code injection
2014-10-15 00:55:00
cert
cert
POODLE vulnerability in SSL 3.0
2014-10-17 00:00:00
f5
f5
K15702 : SSLv3 vulnerability CVE-2014-3566
2015-09-18 00:00:00
seebug
seebug
SSL 3.0 POODLE（CVE-2014-3566）
2017-02-17 00:00:00
amazon
amazon
Important: openssl
2014-10-14 22:32:00
citrix
citrix
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
2014-10-14 04:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CVE-2014-3566
freebsd2redhat3nessus38openvas20centos1hackerone4paloalto1threatpost1fedora12ubuntucve1debiancve1ibm94securityvulns4hp1veracode3nvd1aix1debian1fortinet1checkpoint_security1huawei1osv2prion1cert1f51seebug1amazon1citrix1