The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
Configuration 12 (hide)
|
History
12 Sep 2023, 14:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:* |
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:* cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:* |
Information
Published : 2014-10-15 00:55
Updated : 2024-02-28 12:20
NVD link : CVE-2014-3566
Mitre link : CVE-2014-3566
CVE.ORG link : CVE-2014-3566
JSON object : View
Products Affected
opensuse
- opensuse
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_desktop_supplementary
- enterprise_linux_workstation_supplementary
- enterprise_linux_server_supplementary
- enterprise_linux
- enterprise_linux_workstation
novell
- suse_linux_enterprise_software_development_kit
- suse_linux_enterprise_server
- suse_linux_enterprise_desktop
mageia
- mageia
ibm
- vios
- aix
fedoraproject
- fedora
apple
- mac_os_x
openssl
- openssl
netbsd
- netbsd
debian
- debian_linux
oracle
- database
CWE
CWE-310
Cryptographic Issues