CVE Feed

    Dashboard / CVE / CVE-2014-3566

    CVE-2014-3566

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

    Published:Oct 14, 2014
    Last Modified:May 28, 2026
    EPS:Oct 15, 2014
    EPSS Score:0.94015
    CVSS Score:3.4

    Affected Products

    Vendor
    Apple
    Product
    Mac Os X
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Ibm
    Product
    Aix
    Vendor
    Ibm
    Product
    Vios
    Vendor
    Mageia
    Product
    Mageia
    Vendor
    Netbsd
    Product
    Netbsd
    Vendor
    Novell
    Product
    Suse Linux Enterprise Desktop
    Vendor
    Novell
    Product
    Suse Linux Enterprise Server
    Vendor
    Novell
    Product
    Suse Linux Enterprise Software Development Kit
    Vendor
    Openssl
    Product
    Openssl
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Oracle
    Product
    Database
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop Supplementary
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Supplementary
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation Supplementary
    Vendor
    Redhat
    Product
    Jboss Enterprise Application Platform
    Vendor
    Redhat
    Product
    Jboss Enterprise Web Platform
    Vendor
    Redhat
    Product
    Jboss Enterprise Web Server
    Vendor
    Redhat
    Product
    Network Satellite
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Rhel Extras
    Vendor
    Redhat
    Product
    Rhel Extras Oracle Java
    Vendor
    Redhat
    Product
    Satellite

    Exploits

    https://github.com/cloudpassage/mangy-beasthttps://github.com/GoRuGoo/poodle-attack-sandboxhttps://github.com/jmonge12/Home-Network-Vulnerability-Assessmenthttps://github.com/josecl200/VC-PoodlePOChttps://github.com/mikesplain/CVE-2014-3566-poodle-cookbookhttps://github.com/mpgn/poodle-PoChttps://github.com/stdevel/poodle_protectorhttps://github.com/uthrasri/openssl_g2.5_CVE-2014-3566

    Related CVEs

    CVE-2024-41868 (CVSS 5.5) — Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could le…
    CVE-2024-39378 (CVSS 7.8) — Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could r…
    CVE-2021-3187 (CVSS 8.8) — An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged…
    CVE-2023-34045 (CVSS 6.6) — VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during inst…
    CVE-2023-34046 (CVSS 6.7) — VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs dur…
    CVE-2023-34044 (CVSS 7.1) — VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerab…
    CVE-2022-46706 (CVSS 7.8) — A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022…
    CVE-2022-22630 (CVSS 9.8) — A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.…
    CVE-2023-1763 (CVSS 6.5) — Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and…
    CVE-2023-1764 (CVSS 6.5) — Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and…

    References

    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc
    http://advisories.mageia.org/MGASA-2014-0416.html
    http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
    http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
    http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
    http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
    http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html
    http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/
    http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx
    http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf
    http://downloads.asterisk.org/pub/security/AST-2014-011.html
    http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
    http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
    http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
    http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
    http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
    http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html
    http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
    http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
    http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html
    http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html
    http://marc.info/?l=bugtraq&m=141450452204552&w=2
    http://marc.info/?l=bugtraq&m=141450973807288&w=2
    http://marc.info/?l=bugtraq&m=141477196830952&w=2
    http://marc.info/?l=bugtraq&m=141576815022399&w=2
    http://marc.info/?l=bugtraq&m=141577087123040&w=2
    http://marc.info/?l=bugtraq&m=141577350823734&w=2
    http://marc.info/?l=bugtraq&m=141620103726640&w=2
    http://marc.info/?l=bugtraq&m=141628688425177&w=2
    http://marc.info/?l=bugtraq&m=141694355519663&w=2
    http://marc.info/?l=bugtraq&m=141697638231025&w=2
    http://marc.info/?l=bugtraq&m=141697676231104&w=2
    http://marc.info/?l=bugtraq&m=141703183219781&w=2
    http://marc.info/?l=bugtraq&m=141715130023061&w=2
    http://marc.info/?l=bugtraq&m=141775427104070&w=2
    http://marc.info/?l=bugtraq&m=141813976718456&w=2
    http://marc.info/?l=bugtraq&m=141814011518700&w=2
    http://marc.info/?l=bugtraq&m=141879378918327&w=2
    http://marc.info/?l=bugtraq&m=142103967620673&w=2
    http://marc.info/?l=bugtraq&m=142118135300698&w=2
    http://marc.info/?l=bugtraq&m=142296755107581&w=2
    http://marc.info/?l=bugtraq&m=142350196615714&w=2
    http://marc.info/?l=bugtraq&m=142350298616097&w=2
    http://marc.info/?l=bugtraq&m=142350743917559&w=2
    http://marc.info/?l=bugtraq&m=142354438527235&w=2
    http://marc.info/?l=bugtraq&m=142357976805598&w=2
    http://marc.info/?l=bugtraq&m=142495837901899&w=2
    http://marc.info/?l=bugtraq&m=142496355704097&w=2
    http://marc.info/?l=bugtraq&m=142546741516006&w=2
    http://marc.info/?l=bugtraq&m=142607790919348&w=2
    http://marc.info/?l=bugtraq&m=142624590206005&w=2
    http://marc.info/?l=bugtraq&m=142624619906067
    http://marc.info/?l=bugtraq&m=142624619906067&w=2
    http://marc.info/?l=bugtraq&m=142624679706236&w=2
    http://marc.info/?l=bugtraq&m=142624719706349&w=2
    http://marc.info/?l=bugtraq&m=142660345230545&w=2
    http://marc.info/?l=bugtraq&m=142721830231196&w=2
    http://marc.info/?l=bugtraq&m=142721887231400&w=2
    http://marc.info/?l=bugtraq&m=142740155824959&w=2
    http://marc.info/?l=bugtraq&m=142791032306609&w=2
    http://marc.info/?l=bugtraq&m=142804214608580&w=2
    http://marc.info/?l=bugtraq&m=142805027510172&w=2
    http://marc.info/?l=bugtraq&m=142962817202793&w=2
    http://marc.info/?l=bugtraq&m=143039249603103&w=2
    http://marc.info/?l=bugtraq&m=143101048219218&w=2
    http://marc.info/?l=bugtraq&m=143290371927178&w=2
    http://marc.info/?l=bugtraq&m=143290437727362&w=2
    http://marc.info/?l=bugtraq&m=143290522027658&w=2
    http://marc.info/?l=bugtraq&m=143290583027876&w=2
    http://marc.info/?l=bugtraq&m=143558137709884&w=2
    http://marc.info/?l=bugtraq&m=143558192010071&w=2
    http://marc.info/?l=bugtraq&m=143628269912142&w=2
    http://marc.info/?l=bugtraq&m=144101915224472&w=2
    http://marc.info/?l=bugtraq&m=144251162130364&w=2
    http://marc.info/?l=bugtraq&m=144294141001552&w=2
    http://marc.info/?l=bugtraq&m=145983526810210&w=2
    http://marc.info/?l=openssl-dev&m=141333049205629&w=2
    http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html
    http://rhn.redhat.com/errata/RHSA-2014-1652.html
    http://rhn.redhat.com/errata/RHSA-2014-1653.html
    http://rhn.redhat.com/errata/RHSA-2014-1692.html
    http://rhn.redhat.com/errata/RHSA-2014-1876.html
    http://rhn.redhat.com/errata/RHSA-2014-1877.html
    http://rhn.redhat.com/errata/RHSA-2014-1880.html
    http://rhn.redhat.com/errata/RHSA-2014-1881.html
    http://rhn.redhat.com/errata/RHSA-2014-1882.html
    http://rhn.redhat.com/errata/RHSA-2014-1920.html
    http://rhn.redhat.com/errata/RHSA-2014-1948.html
    http://rhn.redhat.com/errata/RHSA-2015-0068.html
    http://rhn.redhat.com/errata/RHSA-2015-0079.html
    http://rhn.redhat.com/errata/RHSA-2015-0080.html
    http://rhn.redhat.com/errata/RHSA-2015-0085.html
    http://rhn.redhat.com/errata/RHSA-2015-0086.html
    http://rhn.redhat.com/errata/RHSA-2015-0264.html
    http://rhn.redhat.com/errata/RHSA-2015-0698.html
    http://rhn.redhat.com/errata/RHSA-2015-1545.html
    http://rhn.redhat.com/errata/RHSA-2015-1546.html
    http://secunia.com/advisories/59627
    http://secunia.com/advisories/60056
    http://secunia.com/advisories/60206
    http://secunia.com/advisories/60792
    http://secunia.com/advisories/60859
    http://secunia.com/advisories/61019
    http://secunia.com/advisories/61130
    http://secunia.com/advisories/61303
    http://secunia.com/advisories/61316
    http://secunia.com/advisories/61345
    http://secunia.com/advisories/61359
    http://secunia.com/advisories/61782
    http://secunia.com/advisories/61810
    http://secunia.com/advisories/61819
    http://secunia.com/advisories/61825
    http://secunia.com/advisories/61827
    http://secunia.com/advisories/61926
    http://secunia.com/advisories/61995
    http://support.apple.com/HT204244
    http://support.citrix.com/article/CTX200238
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439
    http://www-01.ibm.com/support/docview.wss?uid=swg21686997
    http://www-01.ibm.com/support/docview.wss?uid=swg21687172
    http://www-01.ibm.com/support/docview.wss?uid=swg21687611
    http://www-01.ibm.com/support/docview.wss?uid=swg21688283
    http://www-01.ibm.com/support/docview.wss?uid=swg21692299
    http://www.debian.org/security/2014/dsa-3053
    http://www.debian.org/security/2015/dsa-3144
    http://www.debian.org/security/2015/dsa-3147
    http://www.debian.org/security/2015/dsa-3253
    http://www.debian.org/security/2016/dsa-3489
    http://www.kb.cert.org/vuls/id/577193
    http://www.mandriva.com/security/advisories?name=MDVSA-2014:203
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
    http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
    http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
    http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
    http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
    http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
    http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
    http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
    http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
    http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
    http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
    http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
    http://www.securityfocus.com/archive/1/533724/100/0/threaded
    http://www.securityfocus.com/archive/1/533746
    http://www.securityfocus.com/archive/1/533747
    http://www.securityfocus.com/bid/70574
    http://www.securitytracker.com/id/1031029
    http://www.securitytracker.com/id/1031039
    http://www.securitytracker.com/id/1031085
    http://www.securitytracker.com/id/1031086
    http://www.securitytracker.com/id/1031087
    http://www.securitytracker.com/id/1031088
    http://www.securitytracker.com/id/1031089
    http://www.securitytracker.com/id/1031090
    http://www.securitytracker.com/id/1031091
    http://www.securitytracker.com/id/1031092
    http://www.securitytracker.com/id/1031093
    http://www.securitytracker.com/id/1031094
    http://www.securitytracker.com/id/1031095
    http://www.securitytracker.com/id/1031096
    http://www.securitytracker.com/id/1031105
    http://www.securitytracker.com/id/1031106
    http://www.securitytracker.com/id/1031107
    http://www.securitytracker.com/id/1031120
    http://www.securitytracker.com/id/1031123
    http://www.securitytracker.com/id/1031124
    http://www.securitytracker.com/id/1031130
    http://www.securitytracker.com/id/1031131
    http://www.securitytracker.com/id/1031132
    http://www.ubuntu.com/usn/USN-2486-1
    http://www.ubuntu.com/usn/USN-2487-1
    http://www.us-cert.gov/ncas/alerts/TA14-290A
    http://www.vmware.com/security/advisories/VMSA-2015-0003.html
    http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
    http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm
    https://access.redhat.com/articles/1232123
    https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
    https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6
    https://bto.bluecoat.com/security-advisory/sa83
    https://bugzilla.mozilla.org/show_bug.cgi?id=1076983
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
    https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip
    https://github.com/mpgn/poodle-PoC
    https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
    https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
    https://kc.mcafee.com/corporate/index?page=content&id=SB10090
    https://kc.mcafee.com/corporate/index?page=content&id=SB10091
    https://kc.mcafee.com/corporate/index?page=content&id=SB10104
    https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
    https://puppet.com/security/cve/poodle-sslv3-vulnerability
    https://security.gentoo.org/glsa/201507-14
    https://security.gentoo.org/glsa/201606-11
    https://security.netapp.com/advisory/ntap-20141015-0001/
    https://support.apple.com/HT205217
    https://support.apple.com/kb/HT6527
    https://support.apple.com/kb/HT6529
    https://support.apple.com/kb/HT6531
    https://support.apple.com/kb/HT6535
    https://support.apple.com/kb/HT6536
    https://support.apple.com/kb/HT6541
    https://support.apple.com/kb/HT6542
    https://support.citrix.com/article/CTX216642
    https://support.lenovo.com/product_security/poodle
    https://support.lenovo.com/us/en/product_security/poodle
    https://technet.microsoft.com/library/security/3009008.aspx
    https://www-01.ibm.com/support/docview.wss?uid=swg21688165
    https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7
    https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
    https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html
    https://www.elastic.co/blog/logstash-1-4-3-released
    https://www.imperialviolet.org/2014/10/14/poodle.html
    https://www.openssl.org/news/secadv_20141015.txt
    https://www.openssl.org/~bodo/ssl-poodle.pdf
    https://www.suse.com/support/kb/doc.php?id=7015773
    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc
    http://advisories.mageia.org/MGASA-2014-0416.html
    http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
    http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
    http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
    http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
    http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html
    http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/
    http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx
    http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf
    http://downloads.asterisk.org/pub/security/AST-2014-011.html
    http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
    http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
    http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
    http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
    http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
    http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html
    http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
    http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
    http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
    http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html
    http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html
    http://marc.info/?l=bugtraq&m=141450452204552&w=2
    http://marc.info/?l=bugtraq&m=141450973807288&w=2
    http://marc.info/?l=bugtraq&m=141477196830952&w=2
    http://marc.info/?l=bugtraq&m=141576815022399&w=2
    http://marc.info/?l=bugtraq&m=141577087123040&w=2
    http://marc.info/?l=bugtraq&m=141577350823734&w=2
    http://marc.info/?l=bugtraq&m=141620103726640&w=2
    http://marc.info/?l=bugtraq&m=141628688425177&w=2
    http://marc.info/?l=bugtraq&m=141694355519663&w=2
    http://marc.info/?l=bugtraq&m=141697638231025&w=2
    http://marc.info/?l=bugtraq&m=141697676231104&w=2
    http://marc.info/?l=bugtraq&m=141703183219781&w=2
    http://marc.info/?l=bugtraq&m=141715130023061&w=2
    http://marc.info/?l=bugtraq&m=141775427104070&w=2
    http://marc.info/?l=bugtraq&m=141813976718456&w=2
    http://marc.info/?l=bugtraq&m=141814011518700&w=2
    http://marc.info/?l=bugtraq&m=141879378918327&w=2
    http://marc.info/?l=bugtraq&m=142103967620673&w=2
    http://marc.info/?l=bugtraq&m=142118135300698&w=2
    http://marc.info/?l=bugtraq&m=142296755107581&w=2
    http://marc.info/?l=bugtraq&m=142350196615714&w=2
    http://marc.info/?l=bugtraq&m=142350298616097&w=2
    http://marc.info/?l=bugtraq&m=142350743917559&w=2
    http://marc.info/?l=bugtraq&m=142354438527235&w=2
    http://marc.info/?l=bugtraq&m=142357976805598&w=2
    http://marc.info/?l=bugtraq&m=142495837901899&w=2
    http://marc.info/?l=bugtraq&m=142496355704097&w=2
    http://marc.info/?l=bugtraq&m=142546741516006&w=2
    http://marc.info/?l=bugtraq&m=142607790919348&w=2
    http://marc.info/?l=bugtraq&m=142624590206005&w=2
    http://marc.info/?l=bugtraq&m=142624619906067
    http://marc.info/?l=bugtraq&m=142624619906067&w=2
    http://marc.info/?l=bugtraq&m=142624679706236&w=2
    http://marc.info/?l=bugtraq&m=142624719706349&w=2
    http://marc.info/?l=bugtraq&m=142660345230545&w=2
    http://marc.info/?l=bugtraq&m=142721830231196&w=2
    http://marc.info/?l=bugtraq&m=142721887231400&w=2
    http://marc.info/?l=bugtraq&m=142740155824959&w=2
    http://marc.info/?l=bugtraq&m=142791032306609&w=2
    http://marc.info/?l=bugtraq&m=142804214608580&w=2
    http://marc.info/?l=bugtraq&m=142805027510172&w=2
    http://marc.info/?l=bugtraq&m=142962817202793&w=2
    http://marc.info/?l=bugtraq&m=143039249603103&w=2
    http://marc.info/?l=bugtraq&m=143101048219218&w=2
    http://marc.info/?l=bugtraq&m=143290371927178&w=2
    http://marc.info/?l=bugtraq&m=143290437727362&w=2
    http://marc.info/?l=bugtraq&m=143290522027658&w=2
    http://marc.info/?l=bugtraq&m=143290583027876&w=2
    http://marc.info/?l=bugtraq&m=143558137709884&w=2
    http://marc.info/?l=bugtraq&m=143558192010071&w=2
    http://marc.info/?l=bugtraq&m=143628269912142&w=2
    http://marc.info/?l=bugtraq&m=144101915224472&w=2
    http://marc.info/?l=bugtraq&m=144251162130364&w=2
    http://marc.info/?l=bugtraq&m=144294141001552&w=2
    http://marc.info/?l=bugtraq&m=145983526810210&w=2
    http://marc.info/?l=openssl-dev&m=141333049205629&w=2
    http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html
    http://rhn.redhat.com/errata/RHSA-2014-1652.html
    http://rhn.redhat.com/errata/RHSA-2014-1653.html
    http://rhn.redhat.com/errata/RHSA-2014-1692.html
    http://rhn.redhat.com/errata/RHSA-2014-1876.html
    http://rhn.redhat.com/errata/RHSA-2014-1877.html
    http://rhn.redhat.com/errata/RHSA-2014-1880.html
    http://rhn.redhat.com/errata/RHSA-2014-1881.html
    http://rhn.redhat.com/errata/RHSA-2014-1882.html
    http://rhn.redhat.com/errata/RHSA-2014-1920.html
    http://rhn.redhat.com/errata/RHSA-2014-1948.html
    http://rhn.redhat.com/errata/RHSA-2015-0068.html
    http://rhn.redhat.com/errata/RHSA-2015-0079.html
    http://rhn.redhat.com/errata/RHSA-2015-0080.html
    http://rhn.redhat.com/errata/RHSA-2015-0085.html
    http://rhn.redhat.com/errata/RHSA-2015-0086.html
    http://rhn.redhat.com/errata/RHSA-2015-0264.html
    http://rhn.redhat.com/errata/RHSA-2015-0698.html
    http://rhn.redhat.com/errata/RHSA-2015-1545.html
    http://rhn.redhat.com/errata/RHSA-2015-1546.html
    http://secunia.com/advisories/59627
    http://secunia.com/advisories/60056
    http://secunia.com/advisories/60206
    http://secunia.com/advisories/60792
    http://secunia.com/advisories/60859
    http://secunia.com/advisories/61019
    http://secunia.com/advisories/61130
    http://secunia.com/advisories/61303
    http://secunia.com/advisories/61316
    http://secunia.com/advisories/61345
    http://secunia.com/advisories/61359
    http://secunia.com/advisories/61782
    http://secunia.com/advisories/61810
    http://secunia.com/advisories/61819
    http://secunia.com/advisories/61825
    http://secunia.com/advisories/61827
    http://secunia.com/advisories/61926
    http://secunia.com/advisories/61995
    http://support.apple.com/HT204244
    http://support.citrix.com/article/CTX200238
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431
    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439
    http://www-01.ibm.com/support/docview.wss?uid=swg21686997
    http://www-01.ibm.com/support/docview.wss?uid=swg21687172
    http://www-01.ibm.com/support/docview.wss?uid=swg21687611
    http://www-01.ibm.com/support/docview.wss?uid=swg21688283
    http://www-01.ibm.com/support/docview.wss?uid=swg21692299
    http://www.debian.org/security/2014/dsa-3053
    http://www.debian.org/security/2015/dsa-3144
    http://www.debian.org/security/2015/dsa-3147
    http://www.debian.org/security/2015/dsa-3253
    http://www.debian.org/security/2016/dsa-3489
    http://www.kb.cert.org/vuls/id/577193
    http://www.mandriva.com/security/advisories?name=MDVSA-2014:203
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
    http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
    http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
    http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
    http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
    http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
    http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
    http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
    http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
    http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
    http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
    http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
    http://www.securityfocus.com/archive/1/533724/100/0/threaded
    http://www.securityfocus.com/archive/1/533746
    http://www.securityfocus.com/archive/1/533747
    http://www.securityfocus.com/bid/70574
    http://www.securitytracker.com/id/1031029
    http://www.securitytracker.com/id/1031039
    http://www.securitytracker.com/id/1031085
    http://www.securitytracker.com/id/1031086
    http://www.securitytracker.com/id/1031087
    http://www.securitytracker.com/id/1031088
    http://www.securitytracker.com/id/1031089
    http://www.securitytracker.com/id/1031090
    http://www.securitytracker.com/id/1031091
    http://www.securitytracker.com/id/1031092
    http://www.securitytracker.com/id/1031093
    http://www.securitytracker.com/id/1031094
    http://www.securitytracker.com/id/1031095
    http://www.securitytracker.com/id/1031096
    http://www.securitytracker.com/id/1031105
    http://www.securitytracker.com/id/1031106
    http://www.securitytracker.com/id/1031107
    http://www.securitytracker.com/id/1031120
    http://www.securitytracker.com/id/1031123
    http://www.securitytracker.com/id/1031124
    http://www.securitytracker.com/id/1031130
    http://www.securitytracker.com/id/1031131
    http://www.securitytracker.com/id/1031132
    http://www.ubuntu.com/usn/USN-2486-1
    http://www.ubuntu.com/usn/USN-2487-1
    http://www.us-cert.gov/ncas/alerts/TA14-290A
    http://www.vmware.com/security/advisories/VMSA-2015-0003.html
    http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
    http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm
    https://access.redhat.com/articles/1232123
    https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
    https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6
    https://bto.bluecoat.com/security-advisory/sa83
    https://bugzilla.mozilla.org/show_bug.cgi?id=1076983
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
    https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip
    https://github.com/mpgn/poodle-PoC
    https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
    https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
    https://kc.mcafee.com/corporate/index?page=content&id=SB10090
    https://kc.mcafee.com/corporate/index?page=content&id=SB10091
    https://kc.mcafee.com/corporate/index?page=content&id=SB10104
    https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
    https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
    https://puppet.com/security/cve/poodle-sslv3-vulnerability
    https://security.gentoo.org/glsa/201507-14
    https://security.gentoo.org/glsa/201606-11
    https://security.netapp.com/advisory/ntap-20141015-0001/
    https://support.apple.com/HT205217
    https://support.apple.com/kb/HT6527
    https://support.apple.com/kb/HT6529
    https://support.apple.com/kb/HT6531
    https://support.apple.com/kb/HT6535
    https://support.apple.com/kb/HT6536
    https://support.apple.com/kb/HT6541
    https://support.apple.com/kb/HT6542
    https://support.citrix.com/article/CTX216642
    https://support.lenovo.com/product_security/poodle
    https://support.lenovo.com/us/en/product_security/poodle
    https://technet.microsoft.com/library/security/3009008.aspx
    https://templatelab.com/ssl-poodle/
    https://www-01.ibm.com/support/docview.wss?uid=swg21688165
    https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7
    https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
    https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html
    https://www.elastic.co/blog/logstash-1-4-3-released
    https://www.imperialviolet.org/2014/10/14/poodle.html
    https://www.openssl.org/news/secadv_20141015.txt
    https://www.openssl.org/~bodo/ssl-poodle.pdf
    https://www.suse.com/support/kb/doc.php?id=7015773

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High