3.4 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.975 High
EPSS
Percentile
100.0%
Many modern TLS clients can fall back to version 3.0 of the SSL protocol, which is vulnerable to a padding-oracle attack when Cypher-block chaining (CBC) mode is used. This is commonly referred to as the “POODLE” (Padding Oracle On Downgraded Legacy Encryption) attack.
CWE-327: Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-3566
Multiple implementations of SSL 3.0, including the implementation in OpenSSL up to version 1.0.1i, support the use of CBC mode. However, SSL 3.0 is vulnerable to a padding-oracle attack when CBC mode is used. A successful padding-oracle attack can provide an attacker with cleartext information from the encrypted communications.
Additionally, many modern TLS clients still support the ability to fall back to the SSL 3.0 protocol in order to communicate with legacy servers. A man-in-the-middle attacker may be able to force the protocol version negotiation sequence to downgrade to SSL 3.0, thereby opening up the opportunity to exploit the padding-oracle attack.
For more information, please refer to the original security advisory.
An adjacent, unauthenticated attacker may be able to derive cleartext information from communications that utilize the SSL 3.0 protocol with CBC mode.
OpenSSL has fixed the issue in OpenSSL versions 1.0.1j, 1.0.0o, and 0.9.8zc. For other implementations of the protocol, please check with the appropriate maintainer or vendor to determine if the implementation is affected by this issue. Additionally, consider the following workaround:
Use TLS_FALLBACK_SCSV
If disabling SSL 3.0 is not possible, TLS client and server implementations should make use of the TLS_FALLBACK_SCSV cipher suite value to prevent man-in-the-middle attackers from forcing unnecessary protocol downgrades.
577193
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Updated: October 17, 2014
Affected
We have not received a statement from the vendor.
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: October 20, 2014
Affected
Aruba has published an advisory. Users should refer to the advisory for up-to-date information.
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: October 27, 2014
Affected
Attachmate has released an advisory.
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: January 21, 2015
Affected
<https://technet.microsoft.com/en-us/library/security/3009008.aspx>
We are not aware of further vendor information regarding this vulnerability.
Updated: October 17, 2014
Affected
We have not received a statement from the vendor.
We are not aware of further vendor information regarding this vulnerability.
Updated: October 28, 2014
Affected
"We provide information on this issue at the following URL:
<http://jpn.nec.com/security-info/av14-004.html>"
We are not aware of further vendor information regarding this vulnerability.
Updated: October 27, 2014
Affected
Novell has released an advisory.
We are not aware of further vendor information regarding this vulnerability.
Updated: October 17, 2014
Affected
We have not received a statement from the vendor.
We are not aware of further vendor information regarding this vulnerability.
Updated: October 27, 2014
Affected
SUSE has released an advisory.
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: October 20, 2014
Not Affected
"Bouncy Castle Java APIs version 1.46, or later, offer the ability to access SSL v3 by overriding methods in order to allow support for it. By default SSL v3 support is turned off.
It is possible to see if a developer has created the necessary overrides by looking for overrides of the methods AbstractTlsClient.getMinimumVersion () or TlsClient.notifyServerVersion () in client code, and by looking for overrides of AbstractTlsServer.getMinimumVersion () or TlsServer.getServerVersion () in server code.
Bouncy Castle C# APIs version 1.8 (still in beta), also contains a TLS API, which follows the same profile as the Bouncy Castle Java APIs in respect to SSL v3. Support for “TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks”, currently described at
<https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00>
has been added to both the Java and C# APIs to allow developers to prevent SSL v3 as anything but a worst case. We are planning to continue tracking the fallback document as it evolves and will include the results in the next releases of the Java and C# APIs (1.52 and 1.8 respectively)
For further enquiries in relation to this please contact us at [email protected]."
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: October 20, 2014
Not Affected
"MatrixSSL version support is configured with compile-time define, and we have disabled SSL3.0 by default since MatrixSSL 3.3.1 on July 16, 2012.
Anyone using MatrixSSL over the past 2 years would have had to manually enable SSL 3.0. Also, we do TLS style padding for SSL3.0 since the beginning for record encoding, however we can¹t enforce it on decoding, so that was of limited use unless communicating with our own library"
We are not aware of further vendor information regarding this vulnerability.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
Notified: October 17, 2014 Updated: October 17, 2014
Unknown
We have not received a statement from the vendor.
View all 33 vendors __View less vendors __
Group | Score | Vector |
---|---|---|
Base | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Temporal | 3.6 | E:F/RL:OF/RC:C |
Environmental | 3.6 | CDP:ND/TD:H/CR:ND/IR:ND/AR:ND |
This document was written by Todd Lewellen.
CVE IDs: | CVE-2014-3566 |
---|---|
Date Public: | 2014-10-14 Date First Published: |
3.4 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.975 High
EPSS
Percentile
100.0%