CVE-2014-3566
CVE-2014-3566
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
CVSS 3.4 · Low · EPSS 100.0% · Public exploit · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
epiphany-browser Debian:12
- Versions
- 43.1-1
- 44.0-1
- 44.1-1
- 44.2-1
- 44.3-1
- 44.5-1
- 44.5-2
- 44.6-1
- 44~rc-1
- 45.0-1
- 45.1-1
- 45.2-1
- 45~beta-1
- 46.0-1
- 46.0-2
- 46.1-1
- 46.2-1
- 46.3-1
- 46~alpha-1
- 46~beta-1
- 47.0-1
- 47.2-1
- 47~beta-1
- 47~rc-1
- 48.0-1
- 48.1-1
- 48.2-1
- 48.3-1
- 48.3-2
- 48.5-1
- 48.5-2
- 48.5-3
- 48~beta-1
- 48~rc-1
- 48~rc-2
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
epiphany-browser Debian:13
- Versions
- 48.3-2
- 48.5-0+deb13u1
- 48.5-1
- 48.5-2
- 48.5-3
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
epiphany-browser Debian:14
- Versions
- 48.3-2
- 48.5-1
- 48.5-2
- 48.5-3
- 49.0-1
- 49.1-1
- 49.2-1
- 49.2-2
- 49.2-3
- 50.3-1
- 50.3-2
- 50.4-1
- 50.4-2
- 51.0-1
- 51.1-1
- 51~rc-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
erlang Debian:12
- Affected ranges
- ECOSYSTEM: < 1:17.3-dfsg-3
Update to 1:17.3-dfsg-3
erlang Debian:13
- Affected ranges
- ECOSYSTEM: < 1:17.3-dfsg-3
Update to 1:17.3-dfsg-3
erlang Debian:14
- Affected ranges
- ECOSYSTEM: < 1:17.3-dfsg-3
Update to 1:17.3-dfsg-3
gnutls28 Debian:12
- Affected ranges
- ECOSYSTEM: < 3.3.8-5
Update to 3.3.8-5
gnutls28 Debian:13
- Affected ranges
- ECOSYSTEM: < 3.3.8-5
Update to 3.3.8-5
gnutls28 Debian:14
- Affected ranges
- ECOSYSTEM: < 3.3.8-5
Update to 3.3.8-5
haskell-tls Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.9-2
Update to 1.2.9-2
haskell-tls Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.9-2
Update to 1.2.9-2
haskell-tls Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.9-2
Update to 1.2.9-2
lighttpd Debian:12
- Affected ranges
- ECOSYSTEM: < 1.4.35-4
Update to 1.4.35-4
lighttpd Debian:13
- Affected ranges
- ECOSYSTEM: < 1.4.35-4
Update to 1.4.35-4
lighttpd Debian:14
- Affected ranges
- ECOSYSTEM: < 1.4.35-4
Update to 1.4.35-4
netsurf Debian:12
- Affected ranges
- ECOSYSTEM: < 3.6-1
Update to 3.6-1
netsurf Debian:13
- Affected ranges
- ECOSYSTEM: < 3.6-1
Update to 3.6-1
netsurf Debian:14
- Affected ranges
- ECOSYSTEM: < 3.6-1
Update to 3.6-1
nss Debian:12
- Affected ranges
- ECOSYSTEM: < 2:3.17.1-1
Update to 2:3.17.1-1
nss Debian:13
- Affected ranges
- ECOSYSTEM: < 2:3.17.1-1
Update to 2:3.17.1-1
nss Debian:14
- Affected ranges
- ECOSYSTEM: < 2:3.17.1-1
Update to 2:3.17.1-1
openssl Debian:12
- Affected ranges
- ECOSYSTEM: < 1.0.1j-1
Update to 1.0.1j-1
openssl Debian:13
- Affected ranges
- ECOSYSTEM: < 1.0.1j-1
Update to 1.0.1j-1
Original sources
- http://marc.info/?l=bugtraq&m=142103967620673&w=2
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
- http://www.securitytracker.com/id/1031090
- http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/
- http://rhn.redhat.com/errata/RHSA-2014-1880.html
- http://marc.info/?l=bugtraq&m=142804214608580&w=2
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
- http://www.kb.cert.org/vuls/id/577193
- http://marc.info/?l=bugtraq&m=141577087123040&w=2
- http://marc.info/?l=bugtraq&m=141715130023061&w=2
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html
- https://support.apple.com/kb/HT6542
- http://www.securitytracker.com/id/1031106
- http://marc.info/?l=bugtraq&m=141697638231025&w=2
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://marc.info/?l=openssl-dev&m=141333049205629&w=2
- http://marc.info/?l=bugtraq&m=142350298616097&w=2
- http://marc.info/?l=bugtraq&m=142350743917559&w=2
- http://secunia.com/advisories/60056
- http://rhn.redhat.com/errata/RHSA-2014-1877.html
- http://marc.info/?l=bugtraq&m=141477196830952&w=2
- http://secunia.com/advisories/61130
- http://rhn.redhat.com/errata/RHSA-2015-1546.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-3566