DEBIAN-CVE-2014-3566

Advisory lineage Upstream: 1 Downstream: 8
Upstream
CVE-2014-3566
Published: 15 Oct 2014, 00:55
Last modified:28 Apr 2026, 20:13

Vulnerability Summary

Overall Risk (default)
low
14/100
CVSS Score
3.4 LOW
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Oct 2014, 00:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:13
Last Modified
Vulnerability information updated

Description

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

CVSS Metrics

  • v3.1•LOW•Score: 3.4CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected Systems

  • debian•epiphany-browser

    all | all | all | all

  • debian•erlang

    < 1:17.3-dfsg-3 | < 1:17.3-dfsg-3 | < 1:17.3-dfsg-3 | < 1:17.3-dfsg-3

  • debian•gnutls28

    < 3.3.8-5 | < 3.3.8-5 | < 3.3.8-5 | < 3.3.8-5

  • debian•haskell-tls

    < 1.2.9-2 | < 1.2.9-2 | < 1.2.9-2 | < 1.2.9-2

  • debian•lighttpd

    < 1.4.35-4 | < 1.4.35-4 | < 1.4.35-4 | < 1.4.35-4

  • debian•midori

    all

  • debian•netsurf

    < 3.6-1 | < 3.6-1 | < 3.6-1 | < 3.6-1

  • debian•nss

    < 2:3.17.1-1 | < 2:3.17.1-1 | < 2:3.17.1-1 | < 2:3.17.1-1

  • debian•openssl

    < 1.0.1j-1 | < 1.0.1j-1 | < 1.0.1j-1 | < 1.0.1j-1

  • debian•pound

    < 2.6-6 | < 2.6-6 | < 2.6-6

  • debian•surf

    all | all | all | all

  • debian•wolfssl

    < 3.4.8+dfsg-1 | < 3.4.8+dfsg-1 | < 3.4.8+dfsg-1 | < 3.4.8+dfsg-1

References (1)