CVE-2014-3566
- State
- Published
- Severity
- 3.4 Low
- Published
- Oct 15, 2014
- Updated
- May 28, 2026
- Reserved
- May 14, 2014
Description
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.4 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-329 Generation of Predictable IV with CBC Mode
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- HPSBOV03227vendor-advisory
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
- 1031090vdb-entry
- http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/
- RHSA-2014:1880vendor-advisory
- HPSBHF03300vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
- VU#577193third-party-advisory
- HPSBMU03184vendor-advisory
- HPSBGN03209vendor-advisory
- openSUSE-SU-2014:1331vendor-advisory
- https://support.apple.com/kb/HT6542
- 1031106vdb-entry
- HPSBGN03201vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- [openssl-dev] 20141014 Patch to mitigate CVE-2014-3566 ("POODLE")mailing-list
- SSRT101898vendor-advisory
- SSRT101896vendor-advisory
- 60056third-party-advisory
- RHSA-2014:1877vendor-advisory
- HPSBUX03162vendor-advisory
- 61130third-party-advisory
- RHSA-2015:1546vendor-advisory
- SUSE-SU-2015:0503vendor-advisory
- https://support.apple.com/kb/HT6529
- https://www.openssl.org/news/secadv_20141015.txt
- APPLE-SA-2014-10-16-3vendor-advisory
- http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
- RHSA-2014:1920vendor-advisory
- 1031087vdb-entry
- HPSBMU03234vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- https://bto.bluecoat.com/security-advisory/sa83
- SSRT101849vendor-advisory
- http://support.citrix.com/article/CTX200238
- 61359third-party-advisory
- https://support.apple.com/kb/HT6541
- 1031093vdb-entry
- 1031132vdb-entry
- DSA-3144vendor-advisory
- SSRT101790vendor-advisory
- DSA-3253vendor-advisory
- SSRT101846vendor-advisory
- http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
- https://www.suse.com/support/kb/doc.php?id=7015773
- APPLE-SA-2014-10-16-4vendor-advisory
- https://www.elastic.co/blog/logstash-1-4-3-released
- SSRT101854vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
- HPSBST03195vendor-advisory
- 61827third-party-advisory
- HPSBMU03152vendor-advisory
- RHSA-2015:0079vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283
- HPSBMU03304vendor-advisory
- https://technet.microsoft.com/library/security/3009008.aspx
- RHSA-2015:1545vendor-advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21688165
- HPSBMU03259vendor-advisory
- 1031094vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2015-0003.html
- 61316third-party-advisory
- GLSA-201606-11vendor-advisory
- RHSA-2014:1881vendor-advisory
- https://www.imperialviolet.org/2014/10/14/poodle.html
- 1031096vdb-entry
- 61810third-party-advisory
- DSA-3053vendor-advisory
- https://support.lenovo.com/us/en/product_security/poodle
- 1031107vdb-entry
- 1031095vdb-entry
- HPSBMU03223vendor-advisory
- SUSE-SU-2014:1549vendor-advisory
- HPSBGN03305vendor-advisory
- HPSBUX03194vendor-advisory
- SSRT101868vendor-advisory
- 1031091vdb-entry
- HPSBMU03260vendor-advisory
- 1031123vdb-entry
- http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
- https://support.apple.com/HT205217
- 1031092vdb-entry
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- SUSE-SU-2015:0376vendor-advisory
- 61926third-party-advisory
- RHSA-2014:1876vendor-advisory
- http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html
- HPSBHF03156vendor-advisory
- openSUSE-SU-2016:0640vendor-advisory
- http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- SSRT101838vendor-advisory
- HPSBGN03569vendor-advisory
- APPLE-SA-2015-09-16-2vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1076983
- https://support.apple.com/kb/HT6531
- SUSE-SU-2014:1357vendor-advisory
- https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip
- RHSA-2015:0264vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10091
- https://support.apple.com/kb/HT6527
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- SSRT101897vendor-advisory
- HPSBGN03203vendor-advisory
- 60206third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1152789
- 60792third-party-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- APPLE-SA-2014-10-16-1vendor-advisory
- DSA-3489vendor-advisory
- https://security.netapp.com/advisory/ntap-20141015-0001/
- 1031105vdb-entry
- https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
- FEDORA-2014-13069vendor-advisory
- 1031131vdb-entry
- USN-2487-1vendor-advisory
- SSRT101795vendor-advisory
- HPSBGN03222vendor-advisory
- https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html
- 1031130vdb-entry
- HPSBMU03301vendor-advisory
- HPSBGN03164vendor-advisory
- RHSA-2014:1948vendor-advisory
- HPSBGN03192vendor-advisory
- RHSA-2014:1653vendor-advisory
- SUSE-SU-2015:0392vendor-advisory
- HPSBMU03416vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431
- http://support.apple.com/HT204244
- http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx
- HPSBMU03283vendor-advisory
- RHSA-2015:0085vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- https://support.apple.com/kb/HT6536
- FEDORA-2014-12951vendor-advisory
- HPSBGN03191vendor-advisory
- https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU
- SUSE-SU-2014:1526vendor-advisory
- HPSBGN03332vendor-advisory
- RHSA-2014:1652vendor-advisory
- https://support.apple.com/kb/HT6535
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
- SUSE-SU-2015:0345vendor-advisory
- HPSBST03265vendor-advisory
- RHSA-2015:0086vendor-advisory
- HPSBMU03241vendor-advisory
- 1031124vdb-entry
- SUSE-SU-2015:0578vendor-advisory
- SUSE-SU-2015:0336vendor-advisory
- RHSA-2015:0080vendor-advisory
- RHSA-2014:1882vendor-advisory
- RHSA-2015:0068vendor-advisory
- HPSBGN03251vendor-advisory
- USN-2486-1vendor-advisory
- HPSBGN03391vendor-advisory
- 59627third-party-advisory
- HPSBMU03214vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- HPSBMU03263vendor-advisory
- https://support.lenovo.com/product_security/poodle
- 20141014 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerabilityvendor-advisory
- HPSBGN03205vendor-advisory
- RHSA-2015:0698vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- SUSE-SU-2014:1361vendor-advisory
- http://downloads.asterisk.org/pub/security/AST-2014-011.html
- 60859third-party-advisory
- APPLE-SA-2014-10-20-2vendor-advisory
- GLSA-201507-14vendor-advisory
- SSRT101921vendor-advisory
- SSRT101951vendor-advisory
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm
- 61345third-party-advisory
- 61019third-party-advisory
- 70574vdb-entry
- 1031120vdb-entry
- https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- 61825third-party-advisory
- http://advisories.mageia.org/MGASA-2014-0416.html
- 1031029vdb-entry
- HPSBUX03281vendor-advisory
- HPSBMU03267vendor-advisory
- https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
- HPSBMU03261vendor-advisory
- SUSE-SU-2016:1459vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10104
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- 61782third-party-advisory
- https://access.redhat.com/articles/1232123
- MDVSA-2015:062vendor-advisory
- FEDORA-2015-9110vendor-advisory
- 1031085vdb-entry
- HPSBST03418vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- APPLE-SA-2014-10-20-1vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21687611
- https://github.com/mpgn/poodle-PoC
- MDVSA-2014:203vendor-advisory
- SSRT101968vendor-advisory
- http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html
- https://support.citrix.com/article/CTX216642
- https://puppet.com/security/cve/poodle-sslv3-vulnerability
- openSUSE-SU-2015:0190vendor-advisory
- APPLE-SA-2015-01-27-4vendor-advisory
- 61303third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21692299
- 1031039vdb-entry
- SUSE-SU-2016:1457vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21687172
- SUSE-SU-2015:0344vendor-advisory
- SSRT101922vendor-advisory
- 1031089vdb-entry
- HPSBMU03183vendor-advisory
- TA14-290Athird-party-advisory
- FEDORA-2014-13012vendor-advisory
- 61819third-party-advisory
- HPSBGN03255vendor-advisory
- 1031088vdb-entry
- DSA-3147vendor-advisory
- 61995third-party-advisory
- HPSBGN03202vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21686997
- https://kc.mcafee.com/corporate/index?page=content&id=SB10090
- 1031086vdb-entry
- HPSBPI03360vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- RHSA-2014:1692vendor-advisory
- FEDORA-2015-9090vendor-advisory
- https://www.openssl.org/~bodo/ssl-poodle.pdf
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439
- HPSBPI03107vendor-advisory
- [cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.htmlmailing-list
- [cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.htmlmailing-list
- [cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.htmlmailing-list
- [cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.htmlmailing-list
- [cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.htmlmailing-list
- [cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.htmlmailing-list
- https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7
- https://templatelab.com/ssl-poodle/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.