Skip to content
Fencer Intel
low 3.4

CVE-2014-3566 json

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for ma…

published 2014-10-15 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-3547

cvss
3.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
100.0%
EPSS 100.0% chance of exploitation in 30 days, percentile 100%
public exploits
1
Metasploit

Summary

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

Patch / fix

  • nss Debian 14, Debian 13, Debian 12 2:3.17.1-1
  • pound Debian 14, Debian 13 2.6-6
  • erlang Debian 14, Debian 13, Debian 12 1:17.3-dfsg-3
  • netsurf Debian 14, Debian 13, Debian 12 3.6-1
  • openssl Debian 14, Debian 13, Debian 12 1.0.1j-1
  • wolfssl Debian 13, Debian 12 3.4.8+dfsg-1
  • gnutls28 Debian 14, Debian 13, Debian 12 3.3.8-5
  • lighttpd Debian 14, Debian 13, Debian 12 1.4.35-4

debian advisories DEBIAN-CVE-2014-3566

  • openssl Ubuntu 14.04 LTS 1.0.1f-1ubuntu2.7
  • openjdk-6 Ubuntu 14.04 LTS 6b34-1.13.6-1ubuntu0.14.04.1
  • openjdk-7 Ubuntu 14.04 LTS 7u75-2.5.4-1~trusty1

ubuntu advisories UBUNTU-CVE-2014-3566

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • java-1.5.0-ibm RHEL 5 EXTRAS 1:1.5.0.16.8-1jpp.1.el5
  • java-1.5.0-ibm RHEL 6 EXTRAS 1:1.5.0.16.8-1jpp.1.el6_6
  • java-1.5.0-ibm-src RHEL 5 EXTRAS 1:1.5.0.16.8-1jpp.1.el5
  • java-1.5.0-ibm-src RHEL 6 EXTRAS 1:1.5.0.16.8-1jpp.1.el6_6
  • java-1.5.0-ibm-demo RHEL 5 EXTRAS 1:1.5.0.16.8-1jpp.1.el5
  • java-1.5.0-ibm-demo RHEL 6 EXTRAS 1:1.5.0.16.8-1jpp.1.el6_6
  • java-1.5.0-ibm-jdbc RHEL 5 EXTRAS 1:1.5.0.16.8-1jpp.1.el5
  • java-1.5.0-ibm-jdbc RHEL 6 EXTRAS 1:1.5.0.16.8-1jpp.1.el6_6

red hat advisories RHSA-2014:1881RHSA-2014:1877RHSA-2014:1876RHSA-2014:1880RHSA-2014:1882RHSA-2015:0264

  • zxing-cpp SLE Workstation Extension 12 SP5, SLE Software Development Kit 12 SP5 1.2.0-8.3.3
  • libreoffice SLE Workstation Extension 12 SP5, SLE Software Development Kit 12 SP5 7.2.3.2-48.11.4
  • libserf SLE Workstation Extension 12 SP5, SLE Software Development Kit 12 SP5 1.3.9-9.5.3
  • apache2-mod_nss SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +6 more 1.0.14-0.4.25.1
  • apache2-mod_nss SLES for SAP 12 SP1, SLES 12 SP1 1.0.14-18.3
  • cyrus-imapd SLES for SAP 11 SP4, SLES 11 SP4, SLE Software Development Kit 11 SP4 2.3.11-60.65.67.1
  • cyrus-imapd SLES for SAP 12 SP1, SLES for SAP 12, SLES 12 SP1 +1 more 2.3.18-37.1
  • zypper SLES for SAP 12, SLES 12, SLED 12 1.11.32-8.1

suse advisories SUSE-FU-2022:0039-1SUSE-SU-2016:2396-1SUSE-SU-2016:2329-1SUSE-SU-2016:2285-1SUSE-SU-2016:1459-1SUSE-SU-2016:1457-1

  • monit openSUSE Tumbleweed 5.20.0-1.1
  • apache2-mod_nss openSUSE Tumbleweed 1.0.14-4.1
  • fossil openSUSE Tumbleweed 1.35-1.3
  • java-1_7_0-openjdk openSUSE Tumbleweed 1.7.0.121-1.1
  • slrn openSUSE Tumbleweed 1.0.3-3.13

opensuse advisories openSUSE-SU-2024:10275-1openSUSE-SU-2024:10311-1openSUSE-SU-2024:10479-1openSUSE-SU-2024:10534-1openSUSE-SU-2024:11388-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-3566 updated cvss 5.0

SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack

  • Red Hat OpenShift Enterprise 1 jenkins Red Hat OpenStack Foreman puppet
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux 5 nss, openssl097a Red Hat Enterprise Linux 6 nss, nss-tools, nss-sysinit Red Hat Enterprise Linux 7 openssl098e
    affected: no fix available
  • Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) puppet Red Hat Enterprise Linux OpenStack Platform 6 (Juno) puppet Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer puppet Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) puppet, puppet-server
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Virtualization 3 mingw-virt-viewer, mingw32-virt-viewer, mingw64-virt-viewer Red Hat JBoss Enterprise Application Platform 5 openssl
    affected: no fix available
  • Red Hat JBoss Enterprise Web Server 1 openssl Red Hat OpenStack Platform 8 (Liberty) puppet, puppet-server Red Hat OpenStack Platform 9 (Mitaka) puppet, puppet-server
    affected: no fix planned “Will not fix”
  • Red Hat Storage 2 openssl
    affected: no fix available
  • Red Hat Enterprise Linux 5 gnutls Red Hat Enterprise Linux 6 gnutls, gnutls-guile, gnutls-utils Red Hat Enterprise Linux 7 gnutls, gnutls-c++, gnutls-dane, gnutls-utils
    under investigation
  • Red Hat Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun 1.6.0.91-1jpp.1.el7, java-1.7.0-oracle 1.7.0.75-1jpp.2.el7, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el7, +4 more Red Hat Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun 1.6.0.91-1jpp.1.el5_11, java-1.7.0-oracle 1.7.0.75-1jpp.1.el5_11, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el5_11, +4 more Red Hat Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun 1.6.0.91-1jpp.1.el7, java-1.7.0-oracle 1.7.0.75-1jpp.2.el7, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el7, +2 more Red Hat Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun 1.6.0.91-1jpp.1.el6, java-1.7.0-oracle 1.7.0.75-1jpp.1.el6, java-1.8.0-oracle 1.8.0.31-1jpp.1.el6, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el6, +9 more Red Hat Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun 1.6.0.91-1jpp.1.el6, java-1.7.0-oracle 1.7.0.75-1jpp.1.el6, java-1.8.0-oracle 1.8.0.31-1jpp.1.el6, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el6, +9 more Red Hat Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun 1.6.0.91-1jpp.1.el7, java-1.7.0-oracle 1.7.0.75-1jpp.2.el7, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el7, +4 more
    +4 more products
    Red Hat Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun 1.6.0.91-1jpp.1.el5_11, java-1.7.0-oracle 1.7.0.75-1jpp.1.el5_11, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el5_11, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el5_11, +4 more Red Hat Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun 1.6.0.91-1jpp.1.el6, java-1.7.0-oracle 1.7.0.75-1jpp.1.el6, java-1.8.0-oracle 1.8.0.31-1jpp.1.el6, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el6, +9 more Red Hat Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun 1.6.0.91-1jpp.1.el7, java-1.7.0-oracle 1.7.0.75-1jpp.2.el7, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el7, java-1.6.0-sun-plugin 1.6.0.91-1jpp.1.el7, +4 more Red Hat Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun 1.6.0.91-1jpp.1.el6, java-1.7.0-oracle 1.7.0.75-1jpp.1.el6, java-1.8.0-oracle 1.8.0.31-1jpp.1.el6, java-1.6.0-sun-src 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.91-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.91-1jpp.1.el6, +9 more
    fixed: vendor fix RHSA-2015:0086
show 6 more
  • Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk 1.6.0.34-1.13.6.1.el5_11, java-1.7.0-openjdk-src 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk-src 1.6.0.34-1.13.6.1.el5_11, java-1.7.0-openjdk-demo 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk-demo 1.6.0.34-1.13.6.1.el5_11, +2 more Red Hat Enterprise Linux Client (v. 7) nspr 4.10.6-3.el7, nss 3.16.2.3-5.el7, nss-util 3.16.2.3-2.el7, nss-tools 3.16.2.3-5.el7, nss-softokn 3.16.2.3-9.el7, nss-sysinit 3.16.2.3-5.el7, +4 more Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-src 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-src 1.6.0.34-1.13.6.1.el7_0, java-1.7.0-openjdk-demo 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-demo 1.6.0.34-1.13.6.1.el7_0, java-1.7.0-openjdk-javadoc 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-javadoc 1.6.0.34-1.13.6.1.el7_0, +1 more
    fixed: vendor fix RHSA-2015:0085
  • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-src 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-demo 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-jdbc 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-plugin 1.7.1.2.0-1jpp.3.el7_0
    fixed: vendor fix RHSA-2014:1880
  • Red Hat Enterprise Linux ComputeNode (v. 7) nspr 4.10.6-3.el7, nss 3.16.2.3-5.el7, nss-util 3.16.2.3-2.el7, nss-tools 3.16.2.3-5.el7, nss-softokn 3.16.2.3-9.el7, nss-sysinit 3.16.2.3-5.el7, +4 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-src 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-src 1.6.0.34-1.13.6.1.el7_0, java-1.7.0-openjdk-demo 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-demo 1.6.0.34-1.13.6.1.el7_0, java-1.7.0-openjdk-javadoc 1.7.0.75-2.5.4.2.el7_0, java-1.6.0-openjdk-javadoc 1.6.0.34-1.13.6.1.el7_0, +1 more
    fixed: vendor fix RHSA-2015:0085
  • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-src 1.7.1.2.0-1jpp.3.el7_0, java-1.7.1-ibm-demo 1.7.1.2.0-1jpp.3.el7_0
    fixed: vendor fix RHSA-2014:1880
  • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.7.0-openjdk 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk 1.6.0.34-1.13.6.1.el5_11, java-1.7.0-openjdk-src 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk-src 1.6.0.34-1.13.6.1.el5_11, java-1.7.0-openjdk-demo 1.7.0.75-2.5.4.0.el5_11, java-1.6.0-openjdk-demo 1.6.0.34-1.13.6.1.el5_11, +2 more Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk 1.8.0.31-1.b13.el6_6, java-1.7.0-openjdk 1.7.0.75-2.5.4.0.el6_6, java-1.6.0-openjdk 1.6.0.34-1.13.6.1.el6_6, java-1.8.0-openjdk-headless 1.8.0.31-1.b13.el6_6 Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-src 1.8.0.31-1.b13.el6_6, java-1.8.0-openjdk-demo 1.8.0.31-1.b13.el6_6, java-1.7.0-openjdk-src 1.7.0.75-2.5.4.0.el6_6, java-1.6.0-openjdk-src 1.6.0.34-1.13.6.1.el6_6, java-1.7.0-openjdk-demo 1.7.0.75-2.5.4.0.el6_6, java-1.6.0-openjdk-demo 1.6.0.34-1.13.6.1.el6_6, +3 more
    fixed: vendor fix RHSA-2015:0085
  • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm 1.7.0.8.0-1jpp.1.el5, java-1.5.0-ibm 1.5.0.16.8-1jpp.1.el5, java-1.6.0-ibm 1.6.0.16.2-1jpp.1.el5, java-1.7.0-ibm-src 1.7.0.8.0-1jpp.1.el5, java-1.5.0-ibm-src 1.5.0.16.8-1jpp.1.el5, java-1.6.0-ibm-src 1.6.0.16.2-1jpp.1.el5, +13 more Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-ibm 1.7.0.8.0-1jpp.1.el6_6, java-1.7.1-ibm 1.7.1.2.0-1jpp.3.el6_6, java-1.5.0-ibm 1.5.0.16.8-1jpp.1.el6_6, java-1.6.0-ibm 1.6.0.16.2-1jpp.1.el6_6, java-1.7.0-ibm-src 1.7.0.8.0-1jpp.1.el6_6, java-1.7.1-ibm-src 1.7.1.2.0-1jpp.3.el6_6, +16 more
    fixed: vendor fix RHSA-2014:1881

26 more fixed in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSMA-18-058-02 updated cvss 3.4

Philips Intellispace Portal ISP Vulnerabilities

  • Phillips IntelliSpace Portal 7.0.x Phillips IntelliSpace Portal 8.0.x
    affected: mitigation “Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.” usa.philips.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. First public exploit (Metasploit auxiliary/scanner/ssl/ssl_version)
  2. Published

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

100.00% chance of exploitation in the next 30 days, higher than 100% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

CVSS scores

assigned by version score vector
CISA ADP 3.1 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
NVD 3.1 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
CNA 3.1 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-329 Generation of Predictable IV with CBC Mode
  • CWE-310 Cryptographic Issues
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.