The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
Configuration 12 (hide)
|
History
13 Feb 2023, 00:40
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. |
02 Feb 2023, 20:17
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. This flaw allows a man-in-the-middle (MITM) attacker to decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections. |
17 Nov 2021, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Nov 2021, 01:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Nov 2021, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
31 Aug 2021, 15:44
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:ibm:vios:2.2.3.3:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.3:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.1:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.0:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.0.11:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.4:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.0:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.9:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.5:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.6:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.3.4:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.0.12:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.0.13:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.3.2:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.8:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.0.10:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.1:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.5:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.3.0:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.7:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.3.1:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.2.2:*:*:*:*:*:*:* cpe:2.3:o:ibm:vios:2.2.1.4:*:*:*:*:*:*:* |
cpe:2.3:a:ibm:vios:2.2.2.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.2.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.3.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.3.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.3.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.0.13:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.2.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.0.10:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.3.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.3.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.0.12:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.7:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.8:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.2.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.2.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.0.11:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:2.2.1.9:*:*:*:*:*:*:* |
16 Jun 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
02 Apr 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2014-10-15 00:55
Updated : 2023-02-13 00:40
NVD link : CVE-2014-3566
Mitre link : CVE-2014-3566
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_workstation
- enterprise_linux_desktop_supplementary
- enterprise_linux_workstation_supplementary
- enterprise_linux
- enterprise_linux_desktop
- enterprise_linux_server_supplementary
openssl
- openssl
ibm
- vios
- aix
mageia
- mageia
novell
- suse_linux_enterprise_server
- suse_linux_enterprise_desktop
- suse_linux_enterprise_software_development_kit
debian
- debian_linux
fedoraproject
- fedora
opensuse
- opensuse
apple
- mac_os_x
netbsd
- netbsd
oracle
- database
CWE
CWE-310
Cryptographic Issues