{"cve_id":"CVE-2014-3566","published":"2014-10-15T00:55:02.137000+00:00","last_modified":"2026-06-17T00:08:29.637000+00:00","vuln_status":"Modified","description":"The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","base_score":3.4,"base_severity":"LOW","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"REQUIRED","scope":"CHANGED","impact_c":"LOW","impact_i":"NONE","impact_a":"NONE","cwe_ids":["CWE-310","CWE-329"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.99999,"epss_percentile":1.0,"cap_rule_version":"0.1.1","stage":"RECON","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":true,"grant_access":"NONE","caps":["INFO_DISCLOSURE"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:19:04.748137+00:00","first_seen":"2014-10-15T00:55:02.137000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["apple","debian","fedoraproject","ibm","mageia","netbsd","novell","openssl","opensuse","oracle","redhat"],"products":["aix","database","debian_linux","enterprise_linux","enterprise_linux_desktop","enterprise_linux_desktop_supplementary","enterprise_linux_server","enterprise_linux_server_supplementary","enterprise_linux_workstation","enterprise_linux_workstation_supplementary","fedora","mac_os_x","mageia","netbsd","openssl","opensuse","suse_linux_enterprise_desktop","suse_linux_enterprise_server","suse_linux_enterprise_software_development_kit","vios"],"affected":[{"vendor":"apple","product":"mac_os_x","ranges":["≤ 10.10.1"]},{"vendor":"debian","product":"debian_linux","ranges":["8.0","7.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["21","20","19"]},{"vendor":"ibm","product":"aix","ranges":["6.1","5.3","7.1"]},{"vendor":"ibm","product":"vios","ranges":["2.2.2.5","2.2.2.3","2.2.2.2","2.2.2.1","2.2.2.0","2.2.1.9","2.2.1.8","2.2.3.3","2.2.0.10","2.2.3.4","2.2.3.1","2.2.3.0","2.2.2.4","2.2.1.7","2.2.1.6","2.2.1.5","2.2.1.4","2.2.1.3","2.2.1.1","2.2.1.0","2.2.0.13","2.2.0.12","2.2.0.11","2.2.3.2"]},{"vendor":"mageia","product":"mageia","ranges":["3.0","4.0"]},{"vendor":"netbsd","product":"netbsd","ranges":["5.2.2","5.1","5.1.1","5.1.2","5.1.3","5.1.4","5.2","5.2.1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.1","6.1.1","6.1.2","6.1.3","6.1.4","6.1.5"]},{"vendor":"novell","product":"suse_linux_enterprise_desktop","ranges":["9.0","10.0","12.0","11.0"]},{"vendor":"novell","product":"suse_linux_enterprise_server","ranges":["12.0","11.0"]},{"vendor":"novell","product":"suse_linux_enterprise_software_development_kit","ranges":["12.0","11.0"]},{"vendor":"openssl","product":"openssl","ranges":["1.0.0b","1.0.0c","1.0.0d","1.0.0e","1.0.0f","1.0.0g","1.0.0h","1.0.0i","1.0.0j","1.0.0k","1.0.0l","1.0.0m","1.0.0n","1.0.1","1.0.1a","1.0.1b","1.0.1c","1.0.1d","1.0.1e","1.0.1f","1.0.1g","1.0.1h","1.0.1i","0.9.8","0.9.8v","0.9.8x","0.9.8y","0.9.8z","0.9.8za","0.9.8zb","1.0.0","1.0.0a","0.9.8c","0.9.8d","0.9.8e","0.9.8h","0.9.8i","0.9.8j","0.9.8k","0.9.8l","0.9.8m","0.9.8n","0.9.8o","0.9.8p","0.9.8q","0.9.8r","0.9.8s","0.9.8t","0.9.8u","0.9.8w","0.9.8g","0.9.8f","0.9.8a","0.9.8b"]},{"vendor":"opensuse","product":"opensuse","ranges":["13.1","12.3"]},{"vendor":"oracle","product":"database","ranges":["12.1.0.2","11.2.0.4"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["5"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_desktop_supplementary","ranges":["5.0","6.0"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_server_supplementary","ranges":["6.0","5.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_workstation_supplementary","ranges":["6.0","7.0"]}]}