{"id":"CVE-2014-3566","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-3566","generatedAt":"2026-11-05T06:48:54.703Z","title":"The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","description":"The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","published":"2014-10-15T00:55:02.000Z","lastModified":"2026-06-17T00:08:30.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":3.4,"severity":"LOW","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N"},"cwe":["CWE-310","CWE-329"],"affected":["redhat/enterprise linux","redhat/enterprise linux desktop","redhat/enterprise linux desktop supplementary","redhat/enterprise linux server","redhat/enterprise linux server supplementary","redhat/enterprise linux workstation","redhat/enterprise linux workstation supplementary","ibm/aix","apple/mac os x","mageia/mageia","novell/suse linux enterprise desktop","novell/suse linux enterprise software development kit","novell/suse linux enterprise server","opensuse/opensuse","fedoraproject/fedora","openssl/openssl","ibm/vios","netbsd/netbsd","debian/debian linux","oracle/database"],"epss":{"score":0.99999,"percentile":1,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 100.0%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://downloads.asterisk.org/pub/security/AST-2014-011.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141450452204552&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141450973807288&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141576815022399&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141577087123040&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141577350823734&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141620103726640&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141628688425177&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141694355519663&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141697638231025&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141697676231104&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141703183219781&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141715130023061&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141775427104070&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141813976718456&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141814011518700&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141879378918327&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142296755107581&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142350196615714&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142350298616097&w=2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3566","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}