CVE-2014-3566
published 2014-10-15CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle…
PriorityP343low3.4CVSS 3.1
AVNACHPRNUIRSCCLINAN
EXPLOIT
EPSS
100.00%
100.0th percentile
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Affected
337 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | <= 10.10.1 | — |
| apple | os_x_server_v4.1 | — | — |
| apple | os_x_yosemite_v10.10.2_and_security_update_2015-001 | — | — |
| apple | xcode | — | — |
| apsis | pound | >= 0 < 2.6-6 | 2.6-6 |
| apsis | pound | >= 0 < 2.6-6 | 2.6-6 |
| apsis | pound | >= 0 < 2.6-6 | 2.6-6 |
| citrix | netscaler_adc_gateway | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | cloudera_manager | — | — |
| cloudera | navigator | — | — |
| cloudera | navigator | — | — |
| cloudera | navigator | — | — |
| cloudera | navigator | — | — |
| cloudera | navigator | — | — |
| cloudera | navigator | — | — |
| debian | bouncycastle | < erlang 1:17.3-dfsg-3 (bookworm) | erlang 1:17.3-dfsg-3 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | epiphany-browser | < erlang 1:17.3-dfsg-3 (bookworm) | erlang 1:17.3-dfsg-3 (bookworm) |
| debian | erlang | < erlang 1:17.3-dfsg-3 (bookworm) | erlang 1:17.3-dfsg-3 (bookworm) |
Detection & IOCsextracted from sources · hover to see the quote
- →Alert on any SSLv3 connection negotiation in server responses; presence of SSLv3 indicates potential POODLE attack surface regardless of whether an active attack is underway. ↗
- →Detect SSLv3 CBC padding oracle exploitation by monitoring for modified/replayed SSL packets with anomalous padding bytes targeting the same session. ↗
- →Monitor for TLS downgrade handshakes where a client falls back from TLS to SSLv3; this forced downgrade is the prerequisite for POODLE exploitation. ↗
- →Focus detection on port 443 traffic for SSLv3 sessions; POODLE exploitation is most prevalent on this port. ↗
- →Hits on Palo Alto IPS signature 36815 (SSLv3 Found in Server Response) do not confirm an active attack but indicate any such session is vulnerable to POODLE and should be treated as potentially compromised. ↗
- ·The POODLE attack requires the attacker to already be in the network path (man-in-the-middle); remote unauthenticated exploitation without network interception is not possible. ↗
- ·CVE-2014-8730 (F5 BIG-IP variant) is scoped only to the F5 implementation; other vulnerable TLS 1.x implementations with improper CBC padding checks should receive separate CVE IDs and are not covered by this identifier. ↗
- ·SSLv3 IPS signature hits indicate exposure but not confirmed exploitation; all SSLv3 sessions should be treated as potentially compromised. ↗
CVSS provenance
nvdv3.13.4LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv3.4LOW
vendor_cisco3.4LOW
vendor_debian3.4LOW
vendor_redhat3.4LOW
vendor_ubuntu3.4LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
HP VAN SDN Controller SSLv3 POODLE cryptographic issue (HPSBPV03516 / VU#577193)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] HP VAN SDN Controller SSLv3 POODLE cryptographic issue (HPSBPV03516 / VU#577193)
A vulnerability was found in HP VAN SDN Controller. It has been classified as critical. This vulnerability affects unknown code of the component SSLv3. Performing a manipulation results in cryptographic issues (POODLE).
This vulnerability is identified as CVE-2014-3566. The attack can be initiated remotely. Additionally, an exploit exists.
Upgrading the affected component is recommended.
VulDB
Oracle Sun Network QDR InfiniBand Gateway Switch up to 2.2.1 cryptographic issue (VU#577193 / Nessus ID 84264)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Sun Network QDR InfiniBand Gateway Switch up to 2.2.1 cryptographic issue (VU#577193 / Nessus ID 84264)
A vulnerability was found in Oracle Sun Network QDR InfiniBand Gateway Switch up to 2.2.1. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to cryptographic issues.
This vulnerability is referenced as CVE-2014-3566. It is possible to launch the attack remotely. Furthermore, an exploit is available.
It is recommended to upgrade the affected component.
VulDB
Oracle Database Server 11.2.0.4/12.1.0.2 DBMS_LDAP cryptographic issue (VU#577193 / Nessus ID 79713)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Database Server 11.2.0.4/12.1.0.2 DBMS_LDAP cryptographic issue (VU#577193 / Nessus ID 79713)
A vulnerability classified as critical has been found in Oracle Database Server 11.2.0.4/12.1.0.2. The impacted element is an unknown function of the component DBMS_LDAP. The manipulation leads to cryptographic issues.
This vulnerability is documented as CVE-2014-3566. The attack can be initiated remotely. Additionally, an exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle Enterprise Manager Ops Center 11.1.3/12.1.4 Update Provisioning cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Enterprise Manager Ops Center 11.1.3/12.1.4 Update Provisioning cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability labeled as problematic has been found in Oracle Enterprise Manager Ops Center 11.1.3/12.1.4. Affected is an unknown function of the component Update Provisioning. The manipulation results in cryptographic issues.
This vulnerability is cataloged as CVE-2014-3566. The attack may be launched remotely. Furthermore, there is an exploit available.
The affected component should be upgraded.
VulDB
Oracle Secure Global Desktop 4.63/4.71/5.0/5.1 Protocol cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Secure Global Desktop 4.63/4.71/5.0/5.1 Protocol cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability described as problematic has been identified in Oracle Secure Global Desktop 4.63/4.71/5.0/5.1. Affected by this vulnerability is an unknown functionality of the component Protocol. Executing a manipulation can lead to cryptographic issues.
The identification of this vulnerability is CVE-2014-3566. The attack may be launched remotely. Furthermore, there is an exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle Fujitsu M10-1/M10-4/M10-4S Servers up to XCP 223x XCP Firmware cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Fujitsu M10-1/M10-4/M10-4S Servers up to XCP 223x XCP Firmware cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability marked as problematic has been reported in Oracle Fujitsu M10-1, M10-4 and M10-4S Servers up to XCP 223x. The impacted element is an unknown function of the component XCP Firmware. This manipulation causes cryptographic issues.
The identification of this vulnerability is CVE-2014-3566. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is suggested to upgrade the affected component.
VulDB
Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 cryptographic issue (HT204244 / VU#577193)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 cryptographic issue (HT204244 / VU#577193)
A vulnerability labeled as critical has been found in Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1. Affected by this vulnerability is an unknown functionality. The manipulation results in cryptographic issues.
This vulnerability is cataloged as CVE-2014-3566. The attack may be launched remotely. Furthermore, there is an exploit available.
The affected component should be upgraded.
VulDB
Oracle Java SE 5.0u75/6u85/7u72/8u25 JSSE cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Java SE 5.0u75/6u85/7u72/8u25 JSSE cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability, which was classified as problematic, was found in Oracle Java SE 5.0u75/6u85/7u72/8u25. The affected element is an unknown function of the component JSSE. Such manipulation leads to cryptographic issues.
This vulnerability is documented as CVE-2014-3566. The attack can be executed remotely. Additionally, an exploit exists.
You should upgrade the affected component.
VulDB
Oracle Solaris Cluster 4.2 GlassFish Server cryptographic issue (VU#577193 / Nessus ID 84264)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Solaris Cluster 4.2 GlassFish Server cryptographic issue (VU#577193 / Nessus ID 84264)
A vulnerability was found in Oracle Solaris Cluster 4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component GlassFish Server. Such manipulation leads to cryptographic issues.
This vulnerability is documented as CVE-2014-3566. The attack can be executed remotely. Additionally, an exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle Sun Data Center InfiniBand Switch 36 up to 2.2.1 cryptographic issue (VU#577193 / Nessus ID 84264)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Sun Data Center InfiniBand Switch 36 up to 2.2.1 cryptographic issue (VU#577193 / Nessus ID 84264)
A vulnerability was found in Oracle Sun Data Center InfiniBand Switch 36 up to 2.2.1. It has been classified as problematic. This affects an unknown function. This manipulation causes cryptographic issues.
The identification of this vulnerability is CVE-2014-3566. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
Upgrading the affected component is recommended.
VulDB
OpenSSL up to 1.0.0i SSLv3 Downgrade POODLE cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] OpenSSL up to 1.0.0i SSLv3 Downgrade POODLE cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability, which was classified as critical, was found in OpenSSL up to 1.0.0i. This affects an unknown function of the component SSLv3 Downgrade Handler. Such manipulation leads to cryptographic issues (POODLE).
This vulnerability is referenced as CVE-2014-3566. It is possible to launch the attack remotely. Furthermore, an exploit is available. This vulnerability is notable in history due to its background and the response it received.
You should upgrade the affected component.
VulDB
Oracle SPARC Enterprise M3000/M4000/M5000/M8000/M9000 up to XCP 1118 XCP Firmware cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle SPARC Enterprise M3000/M4000/M5000/M8000/M9000 up to XCP 1118 XCP Firmware cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability described as problematic has been identified in Oracle SPARC Enterprise M3000, M4000, M5000, M8000 and M9000 up to XCP 1118. This affects an unknown function of the component XCP Firmware. Such manipulation leads to cryptographic issues.
This vulnerability is referenced as CVE-2014-3566. It is possible to launch the attack remotely. Furthermore, an exploit is available.
Upgrading the affected component is recommended.
VulDB
Apple Xcode up to 6.4 IDE Xcode Server cryptographic issue (HT205217 / VU#577193)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Apple Xcode up to 6.4 IDE Xcode Server cryptographic issue (HT205217 / VU#577193)
A vulnerability, which was classified as critical, has been found in Apple Xcode up to 6.4. Affected by this vulnerability is an unknown functionality of the component IDE Xcode Server. This manipulation causes cryptographic issues.
The identification of this vulnerability is CVE-2014-3566. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is advisable to upgrade the affected component.
VulDB
Oracle VM Server 3.1/3.2 on SPARC MGMT XML interface cryptographic issue (VU#577193 / Nessus ID 80921)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle VM Server 3.1/3.2 on SPARC MGMT XML interface cryptographic issue (VU#577193 / Nessus ID 80921)
A vulnerability described as very critical has been identified in Oracle VM Server 3.1/3.2 on SPARC. This affects an unknown function of the component MGMT XML interface. The manipulation results in cryptographic issues.
This vulnerability is known as CVE-2014-3566. It is possible to launch the attack remotely. Furthermore, an exploit is available.
Upgrading the affected component is recommended.
VulDB
Oracle Endeca Server up to 7.6.1.0 OpenSSL cryptographic issue (VU#577193 / Nessus ID 79713)
vuldb·2026-05-29·CVSS 3.4
CVE-2014-3566 [LOW] Oracle Endeca Server up to 7.6.1.0 OpenSSL cryptographic issue (VU#577193 / Nessus ID 79713)
A vulnerability was found in Oracle Endeca Server 7.4.0.0/7.5.0.0/7.5.1.0/7.6.0.0/7.6.1.0 and classified as problematic. Affected is an unknown function of the component OpenSSL. Executing a manipulation can lead to cryptographic issues.
This vulnerability appears as CVE-2014-3566. The attack may be performed from remote. In addition, an exploit is available.
It is suggested to upgrade the affected component.
GHSA
GHSA-fr49-w774-hwch: The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10
ghsa_unreviewed·2022-05-17·CVSS 3.4
CVE-2014-8730 [LOW] GHSA-fr49-w774-hwch: The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10
The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable impl
GHSA
GHSA-2mqc-5vrf-pmw6: Cloudera Navigator 2
ghsa_unreviewed·2022-05-17·CVSS 3.4
CVE-2015-4078 [LOW] CWE-200 GHSA-2mqc-5vrf-pmw6: Cloudera Navigator 2
Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
GHSA
GHSA-2262-5cw2-4w9w: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9
ghsa_unreviewed·2022-05-17·CVSS 3.4
CVE-2015-3642 [LOW] CWE-200 GHSA-2262-5cw2-4w9w: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
GHSA
GHSA-r82h-wc4x-gcp9: The SSL protocol 3
ghsa_unreviewed·2022-05-17
CVE-2014-3566 [MEDIUM] GHSA-r82h-wc4x-gcp9: The SSL protocol 3
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
GHSA
GHSA-x7g5-r7mw-4gvx: Erlang/OTP before 18
ghsa_unreviewed·2022-05-14·CVSS 3.4
CVE-2015-2774 [LOW] CWE-200 GHSA-x7g5-r7mw-4gvx: Erlang/OTP before 18
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
GHSA
GHSA-gmxw-f223-9jx2: The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4
ghsa_unreviewed·2022-05-13·CVSS 3.4
CVE-2015-5537 [LOW] CWE-312 GHSA-gmxw-f223-9jx2: The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.
OSV
CVE-2015-2774: Erlang/OTP before 18
osv·2016-04-07·CVSS 3.4
CVE-2015-2774 [LOW] CVE-2015-2774: Erlang/OTP before 18
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
OSV
openjdk-7 vulnerabilities
osv·2015-01-28·CVSS 3.4
CVE-2014-3566 [LOW] openjdk-7 vulnerabilities
openjdk-7 vulnerabilities
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,
CVE-2015-0408, CVE-2015-0412)
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-6585, CVE-2014-6591, CVE-2015-0400,
CVE-2015-0407)
A vulnerability was discovered in the OpenJDK JRE related to
information disclosure and integrity. An attacker could exploit this to
expose sensitive data over the network. (CVE-2014-6593)
A vulnerability was discovere
OSV
CVE-2014-3566: The SSL protocol 3
osv·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566: The SSL protocol 3
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Citrix
CVE-2015-3642: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x be
vendor_citrix·2017-08-02·CVSS 5.9
CVE-2015-3642 [LOW] CWE-200 CVE-2015-3642: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x be
CVE-2015-3642: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
CISA ICS
Rockwell Automation Stratix 5900
cisa_ics·2017-05-10
Rockwell Automation Stratix 5900
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation Stratix 5900
Last RevisedMay 10, 2017
Alert CodeICSA-17-094-04
## CVSS v3 10.0
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: Rockwell Automation
Equipment: Stratix 5900
Vulnerabilities: Improper Input Validation, Resource Management Errors, Improper Authentication, Path Traversal.
## REPOSTED INFORMATION
This advisory was originally posted to the NCCIC Portal on April 4, 2017, and is being released to the NCCIC/ICS-CERT web site.
## AFFECTED PRODUCTS
Rockwell Automation reports that these vulnerabilities affect the following Strat
Ubuntu
OpenJDK 7 vulnerabilities
vendor_ubuntu·2015-01-28·CVSS 3.4
CVE-2014-3566 [LOW] OpenJDK 7 vulnerabilities
Title: OpenJDK 7 vulnerabilities
Summary: Several security issues were fixed in OpenJDK 7.
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,
CVE-2015-0408, CVE-2015-0412)
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-6585, CVE-2014-6591, CVE-2015-0400,
CVE-2015-0407)
A vulnerability was discovered in the OpenJDK JRE related to
information disclosure and integrity. An attacker could exploit this to
expose sensitive dat
VMware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
vendor_vmware·2015-01-27·CVSS 6.4
CVE-2014-3513 [MEDIUM] VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
VMSA-2015-0001: VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
a. VMware ESXi, Workstation, Player, and Fusion host privilege escalation vulnerability VMware ESXi, Workstation, Player and Fusion contain an arbitrary file write issue. Exploitation this issue may allow for privilege escalation on the host. The vulnerability does not allow for privilege escalation from the guest Operating System to the host or vice-versa. This means that host memory can not be manipulated from the Guest Operating System. Mitigation For ESXi to be affected, permissions must have been added to ESXi (or a vCenter Server managing it) for a virtual machine administrator role or greater. VMware would like to thank Shanon Olsson for reporting this issue to us through JP
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2015-01-27·CVSS 3.4
CVE-2014-3566 [LOW] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: Several security issues were fixed in OpenJDK 6.
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,
CVE-2015-0408, CVE-2015-0412)
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-6585, CVE-2014-6591, CVE-2015-0400,
CVE-2015-0407)
A vulnerability was discovered in the OpenJDK JRE related to
information disclosure and integrity. An attacker could exploit this to
expose sensitive dat
Debian
CVE-2015-2774: erlang - Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when termin...
vendor_debian·2015·CVSS 3.4
CVE-2015-2774 [LOW] CVE-2015-2774: erlang - Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when termin...
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
Scope: local
bookworm: resolved (fixed in 1:17.3-dfsg-4)
bullseye: resolved (fixed in 1:17.3-dfsg-4)
forky: resolved (fixed in 1:17.3-dfsg-4)
sid: resolved (fixed in 1:17.3-dfsg-4)
trixie: resolved (fixed in 1:17.3-dfsg-4)
Cisco
SSL-TLS Implementations Cipher Block Chaining Padding Information Disclosure Vulnerability
vendor_cisco·2014-12-11·CVSS 3.4
CVE-2014-8730 [LOW] CWE-20 SSL-TLS Implementations Cipher Block Chaining Padding Information Disclosure Vulnerability
SSL-TLS Implementations Cipher Block Chaining Padding Information Disclosure Vulnerability
A vulnerability in certain implementations of the TLSv1 protocol could allow an unauthenticated, remote attacker to access sensitive information.
The vulnerability is due to improper block cipher padding implemented in TLSv1 when using Cipher Block Chaining (CBC) mode. An attacker could exploit the vulnerability to perform an "oracle padding" side channel attack on the cryptographic message. A successful exploit could allow the attacker to access sensitive information.
Consult the bug release note for additional information about affected products and configurations.
F5 Networks has confirmed the vulnerability in a security advisory and released software updates.
Attacks exploiting this vulnera
Red Hat
TLS: incorrect check of padding bytes when using CBC cipher suites
vendor_redhat·2014-12-09·CVSS 3.4
CVE-2014-8730 [LOW] CWE-327 TLS: incorrect check of padding bytes when using CBC cipher suites
TLS: incorrect check of padding bytes when using CBC cipher suites
The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identi
BSD
FreeBSD-SA-14:23.openssl: OpenSSL multiple vulnerabilities
bsd_advisories·2014-10-21·CVSS 7.1
CVE-2014-3513 [HIGH] FreeBSD-SA-14:23.openssl: OpenSSL multiple vulnerabilities
FreeBSD-SA-14:23.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL multiple vulnerabilities
Category: contrib
Module: openssl
Announced: 2014-10-21
Affects: All supported versions of FreeBSD.
Corrected: 2014-10-15 19:59:43 UTC (stable/10, 10.1-PRERELEASE)
2014-10-21 19:00:32 UTC (releng/10.1, 10.1-RC3)
2014-10-21 19:00:32 UTC (releng/10.1, 10.1-RC2-p1)
2014-10-21 19:00:32 UTC (releng/10.1, 10.1-RC1-p1)
2014-10-21 19:00:32 UTC (releng/10.1, 10.1-BETA3-p1)
2014-10-21 20:21:10 UTC (releng/10.0, 10.0-RELEASE-p10)
2014-10-15 20:28:31 UTC (stable/9, 9.3-STABLE)
2014-10-21 20:21:10 UTC (releng/9.3, 9.3-RELEASE-p3)
2014-10-21 20:21:10 UTC (releng/9.2, 9.2-RELEASE-p13)
2014-10-21 20:21:10 UTC (releng/9.1, 9.1-RELEASE-p20)
2014-10-15 20:28:31 UTC (stable/8, 8.4-STABLE)
2014-10-21 20:21:
Palo Alto
SSL 3.0 MITM Attack
vendor_paloalto·2014-10-20·CVSS 3.4
CVE-2014-3566 [LOW] CWE-310 SSL 3.0 MITM Attack
SSL 3.0 MITM Attack
A vulnerability affecting most implementations of SSL 3.0 has been discovered that allows an attacker to decrypt some encrypted contents under certain conditions (CVE-2014-3566). The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. More information can be found at: https://www.openssl.org/~bodo/ssl-poodle.pdf. SSL 3.0 is a supported protocol in PAN-OS services including device management and SSL VPN.
The conditions of successful exploitation are somewhat similar to the BEAST attack, which requires several conditions to be met for successful exploitation (i.e. the attacker requires a
Cisco
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
vendor_cisco·2014-10-15·CVSS 2.6
CVE-2014-3566 [LOW] CWE-310 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 (SSLv3) protocol when using a block cipher in Cipher Block Chaining (CBC) mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer Security (TLS) protocols. By exploiting this vulnerability, an attacker could decrypt a subset of the encrypted communication.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
Jenkins
Jenkins Security Advisory 2014-10-15
vendor_jenkins·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] Jenkins Security Advisory 2014-10-15
Title: Jenkins Security Advisory 2014-10-15
Jenkins Security Advisory 2014-10-15
This advisory discusses the impact of so-called Poodle vulnerability (CVE-2014-3566) in Jenkins core.
Description
This vulnerability allows a man-in-the-middle attacker to decrypt SSLv3 communication. See this post for the technical detail of the attack. This involves an attacker who sits in the middle of a Jenkins controller and a victim, and a victim who opens a web page controller by an attacker. By repeatedly making the victim’s browser to issue an HTTPS request to the Jenkins controller, the attacker can decrypt sensitive information such as session cookie one byte at a time.
Severity
CVE-2014-3566 is rated high . An man-in-the-middle attacker can rela
Red Hat
SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
vendor_redhat·2014-10-14·CVSS 3.4
CVE-2014-3566 [LOW] CWE-636 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. This flaw allows a man-in-the-middle (MITM) attacker to decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections.
Statement: This issue affects the version of openssl as shipped with Red Hat Enterprise Linux 5, 6 an
Debian
CVE-2014-3566: bouncycastle - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses...
vendor_debian·2014·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566: bouncycastle - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses...
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
Apple
CVE-2014-3566: OS X Yosemite v10.10.2 and Security Update 2015-001
vendor_apple·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566: OS X Yosemite v10.10.2 and Security Update 2015-001
Apple Security Update: About the security content of OS X Yosemite v10.10.2 and Security Update 2015-001
Product: OS X Yosemite v10.10.2 and Security Update 2015-001
CVE: CVE-2014-3566
Component: CVE-2014-3566
Apple
CVE-2014-3566: Xcode 7.0
vendor_apple·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566: Xcode 7.0
Apple Security Update: About the security content of Xcode 7.0
Product: Xcode
Version: 7.0
CVE: CVE-2014-3566
Component: CVE-2014-3566
Cisco
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
vendor_cisco
CVE-2014-3566 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
CVE-2014-3566: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 (SSLv3) protocol when using a block cipher in Cipher Block Chaining (CBC) mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer Security (TLS) protocols. By exploiting this vulnerability, an attacker could decrypt a subset of the encrypted communication. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
CWE: CWE-310, CWE-310
Bug IDs: CSCur36740, CSCur23727, CSCuw23863, CSCur27459, CSCur31571
Apple
CVE-2014-3566: OS X Server v4.1
vendor_apple·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566: OS X Server v4.1
Apple Security Update: About the security content of OS X Server v4.1
Product: OS X Server v4.1
CVE: CVE-2014-3566
Component: CVE-2014-3566
No detection rules found.
HackerOne
SSLv3 Poodle Attack on Ip Of semrush
hackerone·2018-03-13·CVSS 3.4
CVE-2014-3566 [LOW] SSLv3 Poodle Attack on Ip Of semrush
SSLv3 Poodle Attack on Ip Of semrush
**Summary:**
POODLE SSLv3 bug on multiple servers
**Description:**
CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
## Steps To Reproduce:
1. Create .txt file include this ip : ( 54.230.149.17 & 54.230.149.158 ) ex: ip.txt
2. nmap -sV --version-light -Pn --script ssl-poodle -p 443 -iL ip.txt
## Supporting Material/References:
```
root@jancok:~# nmap -sV --version-light -Pn --script ssl-poodle -p 443 -iL ip.txt
Starting Nmap 7.25BETA1 ( https://nmap.org ) at 2018-02-22 23:40 EST
Nmap scan report for server-54-230-149-17.sin2.r.cloudfront.net
HackerOne
POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)
hackerone·2018-02-22·CVSS 3.4
CVE-2014-3566 [LOW] POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)
POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)
**Summary:** POODLE SSLv3 bug on multiple twitter smtp servers
**Description:** CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
## Steps To Reproduce:
Hi Twitter Sec team here is the POC
1. get a nmap installation and twitter_smtp_ssl_servers.txt file (attached)
2. run this command :
"nmap -sV --version-light -Pn --script ssl-poodle -p 25 -iL twitter_smtp_ssl_servers.txt | grep -B 5 VULNERABLE"
3. See the results
## Supporting Material/References:
* An output
Bugzilla
(6.4.0) HornetQ: Disallow SSLv3 [6.4.0][defense-in-depth]
bugzilla·2014-11-19
(6.4.0) HornetQ: Disallow SSLv3 [6.4.0][defense-in-depth]
(6.4.0) HornetQ: Disallow SSLv3 [6.4.0][defense-in-depth]
In light of POODLE, it is recommended that the use of SSLv3 be disabled as a hardening measure. This has been already done upstream via jira HORNETQ-1444. The relevant upstream commit is at [1]. We also recommend SSL support be dropped in favor of TLS protocols if feasible.
[1] https://github.com/hornetq/hornetq/commit/e9825f22568eacfb40058ce5177497cbaf2af1a0
Discussion:
My understanding is that Jimmy was checking with security if we should back port this one or not based on the security team directives.
Justin posted changes for this already on our upstream.. we just need to verify if we should back port this or not.
Jimmy?
---
PR sent: https://github.com/hornetq/hornetq/pull/1957
---
This is part of 2.3.24.Final, setting
Bugzilla
CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
bugzilla·2014-11-05·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple
Bugzilla
CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [epel-6]
bugzilla·2014-11-05·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [epel-6]
CVE-2014-3566 asterisk: openssl: Padding Oracle On Downgraded Legacy Encryption attack [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-6 tracking bug for asterisk:
Bugzilla
CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
bugzilla·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
Bodo Möller, Thai Duong and Krzysztof Kotowicz of Google discovered a flaw in the design of SSL version 3.0 that would allow an attacker to calculate the plaintext of secure connections, allowing, for example, secure HTTP cookies to be stolen.
References:
http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
https://www.openssl.org/~bodo/ssl-poodle.pdf
Discussion:
Knowledgebase article:
https://access.redhat.com/articles/1232123
To mitigate this vulnerability, it is recommended that you explicitly disable SSLv3.0 in all affected packages. Additional instructions to do this for each affected package, as well as updates that disable SSLv3.0 by default, are being developed by
Bugzilla
CVE-2014-3566 mingw-openssl: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
bugzilla·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566 mingw-openssl: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
CVE-2014-3566 mingw-openssl: openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
RFE: backport method to disable SSLv3 or disable SSv3 permanently
bugzilla·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] RFE: backport method to disable SSLv3 or disable SSv3 permanently
RFE: backport method to disable SSLv3 or disable SSv3 permanently
+++ This bug was initially created as a clone of Bug #1153027 +++
Description of problem:
Dovecot 2.0.9 does not seem to have a way to configure which SSL protocols are allowed and allows the SSLv3 protocol. Newer versions seem to have a configuration parameter to configure this.
Please backport the features to configure the SSL protocols and ciphers that the server allows. This will allow sysadmins to mitigate CVE-2014-3566.
Or disable SSL3 permanent and completely.
Version-Release number of selected component (if applicable):
dovecot 2.0.9 as shipped with RHEL6.6
How reproducible:
Always
Steps to Reproduce:
1. Enable SSL on dovecot
2. Try to connect using SSLv3
3.
Actual results:
SSLv3 is allowed
Expected results:
Bugzilla
CVE-2014-3566 openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
bugzilla·2014-10-15·CVSS 3.4
CVE-2014-3566 [LOW] CVE-2014-3566 openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
CVE-2014-3566 openssl: Padding Oracle On Downgraded Legacy Encryption attack [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported
Trendmicro
Identifying Top Vulnerabilities in Networks
blogs_trendmicro·2018-05-29
Identifying Top Vulnerabilities in Networks
IoT
# Identifying Top Vulnerabilities in Networks
Our findings homed in on known vulnerabilities, IoT botnets with top vulnerability detections, and devices that are affected. Our scanning covered different OSs, including Linux, Mac, Windows, Android, iOS, and other SDK platforms.
By: Tony Yang, Adam Huang, Louis Tsai
2018/05/29
Read time: ( words)
Save to Folio
We have noted time and again how compromising networks and connected devices is rooted in finding weak points in the system. Often, these are in the form of vulnerabilities. Worse, vulnerabilities that aren’t even new. In the context of the internet of things (IoT) and noteworthy security incidents related to it, these vulnerabilities have afforded attackers means to use unsecure devices to facilitate malicious activities suc
Unit42
POODLE like it’s 1999
blogs_unit42·2014-10-16
POODLE like it’s 1999
1999 was a pretty interesting year for the Internet and security. To jog your memory, here are just a few of the major events from the ultimate (or penultimate, depending on your point of view) year of the last millennium.
- The Melissa Virus was infecting millions of hosts using malicious e-mails.
- Both Napster and MySpace made their first public appearances.
- Internet Explorer 5.0 was released for Windows 3.1, 95 and 98.
- The TLSv1 specification was published to replace SSLv3 to improve security of Internet communications.
In the 15 years since TLS was introduced it has been widely adopted, but in many ways SSLv3 has hung on. The two specifications are very similar, but not interoperable and applications that implement TLS are often capable of falling back to SSL to support legacy s
Unit42
POODLE like it’s 1999
blogs_unit42·2014-10-16
POODLE like it’s 1999
## POODLE like it’s 1999
Ryan Olson
Published: October 16, 2014
Malware
Threat Research
POODLE
SSLv3
1999 was a pretty interesting year for the Internet and security. To jog your memory, here are just a few of the major events from the ultimate (or penultimate, depending on your point of view ) year of the last millennium.
The Melissa Virus was infecting millions of hosts using malicious e-mails.
Both Napster and MySpace made their first public appearances.
Internet Explorer 5.0 was released for Windows 3.1, 95 and 98.
The TLSv1 specification was published to replace SSLv3 to improve security of Internet communications.
In the 15 years since TLS was introduced it has been widely adopted, but in many ways SSLv3 has hung on. The two specifications are very similar, but not inter
Talos
POODLE and The Curse of Backwards Compatibility
blogs_talos·2014-10-15·CVSS 3.4
[LOW] POODLE and The Curse of Backwards Compatibility
## POODLE and The Curse of Backwards Compatibility
This post was written by Martin Lee Old protocol versions are a fact of life. When a new improved protocol is released, products still need to support the old version for backwards compatibility. If previous versions contain weaknesses in security, yet their continued support is mandated, then security can become a major issue when a potential weakness is discovered to be a genuine vulnerability and an exploit is released.
The Transport Layer Security ( TLS ) protocol defines how systems can exchange data securely. The current version 1.2 dates from August 2008, however the protocol’s origins lie in the Secure Sockets Layer (SSL) standard first published in February 1995. As weaknesses in the cryptography and flaws in the protocol design
Talos
POODLE and The Curse of Backwards Compatibility
blogs_talos·2014-10-15·CVSS 3.4
[LOW] POODLE and The Curse of Backwards Compatibility
This post was written by Martin Lee
Old protocol versions are a fact of life. When a new improved protocol is released, products still need to support the old version for backwards compatibility. If previous versions contain weaknesses in security, yet their continued support is mandated, then security can become a major issue when a potential weakness is discovered to be a genuine vulnerability and an exploit is released.
The Transport Layer Security (TLS) protocol defines how systems can exchange data securely. The current version 1.2 dates from August 2008, however the protocol’s origins lie in the Secure Sockets Layer (SSL) standard first published in February 1995. As weaknesses in the cryptography and flaws in the protocol design were discovered, new versions of the protocol were r
arXiv
APILOT: Navigating Large Language Models to Generate Secure Code by Sidestepping Outdated API Pitfalls
arxiv_fulltext·2024-09-25
APILOT: Navigating Large Language Models to Generate Secure Code by Sidestepping Outdated API Pitfalls
APILOT: Navigating Large Language Models to Generate Secure Code by Sidestepping Outdated API Pitfalls
plain
Rev.
\ of LastPage
Weiheng Bai1,
Keyang Xuan2,
Pengxiang Huang3,
Qiushi Wu4,
Jianing Wen1,
Jingjing Wu1 and
Kangjie Lu1
1University of Minnesota - Twin Cities2University of Illinois Urbana-Champaign3Northwestern University4IBM Research
\bai00093, wen00112, wu000295\@umn.edu, [email protected]@umn.edu, \ [email protected], [email protected]
## Abstract
With the rapid development of large language models (LLMs), their applications have expanded into diverse fields, such as code assistance.
However, the substantial size of LLMs makes their training highly resource- and time-intensive, rendering frequent retraining or updates impractical.
Consequently, time-sensitive data
arXiv
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
arxiv_fulltext·2022-12-29
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
## Abstract
Currently, the development of IoT firmware heavily depends on third-party components (TPCs) to improve development efficiency. Nevertheless, TPCs are not secure, and the vulnerabilities in TPCs will influence the security of IoT firmware. Existing works pay less attention to the vulnerabilities caused by TPCs, and we still lack a comprehensive understanding of the security impact of TPC vulnerability against firmware. To fill in the knowledge gap, we design and implement , which leverages syntactical features and control-flow graph features to detect the TPCs in firmware, and then recognizes the corresponding vulnerabilities. Based on , we present the first l
arXiv
On managing vulnerabilities in AI/ML systems
arxiv_fulltext·2021-01-22
On managing vulnerabilities in AI/ML systems
On managing vulnerabilities in AI/ML systems
Jonathan M. Spring
jspring AT sei dot cmu dot edu
0000-0001-9356-219X
CERT Coordination Center\ Engineering Institute\ Mellon University
Pittsburgh
PA
15213
April Galyardt
Software Engineering Institute\ Mellon University
Pittsburgh
PA
15213
Allen D. Householder
0000-0001-8970-4108
CERT Coordination Center\ Engineering Institute\ Mellon University
Pittsburgh
PA
15213
Nathan VanHoudnos
Software Engineering Institute\ Mellon University
Pittsburgh
PA
15213
Spring, Galyardt, Householder, and VanHoudnos
## Abstract
This paper explores how the current paradigm of vulnerability management might adapt to include machine learning systems through a
thought experiment: what if flaws in *ML were assigned *CVE-ID?
We consider both *ML algorithms a
arXiv
Identifying Relevant Information Cues for Vulnerability Assessment Using CVSS
arxiv_fulltext·2018-03-20
Identifying Relevant Information Cues for Vulnerability Assessment Using CVSS
Identifying Relevant Information Cues for Vulnerability Assessment Using
Luca Allodi
0000-0003-1600-0868
Eindhoven University of Technology
De Zaale, Eindhoven, The Netherlands, 5600 MB
[email protected]
Sebastian Banescu\ Femmer
Munich Technical University
Munich, DE
[email protected]
Kristian Beckers
Social Engineering Academy (SEA) GmbH
Frankfurt am Main, DE
[email protected]
L. Allodi et al.
## Abstract
The assessment of new vulnerabilities is an activity that accounts for information from several data sources and produces a `severity' score for the vulnerability. The Common Vulnerability Scoring System ( ) is the reference standard for this assessment. Yet, no guidance currently exists on which information aids a correct assessment and should the
arXiv
Secure by default - the case of TLS
arxiv_fulltext·2017-08-24
Secure by default - the case of TLS
Secure by default -- the case of TLS
Martin Stanek \ 1ex]
Department of Computer Science
Comenius University
@dcs.fmph.uniba.sk
## Abstract
Default configuration of various software applications often neglects security objectives.
We tested the default configuration of TLS in dozen web and application servers.
The results show that ``secure by default'' principle should be adopted more broadly
by developers and package maintainers. In addition, system administrators cannot
rely blindly on default security options.
: TLS, secure defaults, testing.
## Introduction
Security often depends on prudent configuration of software components used in a deployed
system. All necessary security controls and options are there, but one have
to turn them on or simply start using them. Unfortunately
RFC
Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
rfc·2015-02-01
Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Internet Engineering Task Force (IETF) Y. Sheffer
Request for Comments: 7457 Porticor
Category: Informational R. Holz
ISSN: 2070-1721 Technische Universitaet Muenchen
P. Saint-Andre
&yet
February 2015
Summarizing Known Attacks on Transport Layer Security (TLS)
and Datagram TLS (DTLS)
Abstract
Over the last few years, there have been several serious attacks on
Transport Layer Security (TLS), including attacks on its most
commonly used ciphers and modes of operation. This document
summarizes these attacks, with the goal of motivating generic and
protocol-specific recommendations on the usage of TLS and Datagram
TLS (DTLS).
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the In
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.aschttp://advisories.mageia.org/MGASA-2014-0416.htmlhttp://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.aschttp://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlhttp://archives.neohapsis.com/archives/bugtraq/2014-10/0103.htmlhttp://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.htmlhttp://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspxhttp://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdfhttp://downloads.asterisk.org/pub/security/AST-2014-011.htmlhttp://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.htmlhttp://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00002.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.htmlhttp://marc.info/?l=bugtraq&m=141450452204552&w=2http://marc.info/?l=bugtraq&m=141450973807288&w=2http://marc.info/?l=bugtraq&m=141477196830952&w=2http://marc.info/?l=bugtraq&m=141576815022399&w=2http://marc.info/?l=bugtraq&m=141577087123040&w=2http://marc.info/?l=bugtraq&m=141577350823734&w=2http://marc.info/?l=bugtraq&m=141620103726640&w=2http://marc.info/?l=bugtraq&m=141628688425177&w=2http://marc.info/?l=bugtraq&m=141694355519663&w=2http://marc.info/?l=bugtraq&m=141697638231025&w=2http://marc.info/?l=bugtraq&m=141697676231104&w=2http://marc.info/?l=bugtraq&m=141703183219781&w=2http://marc.info/?l=bugtraq&m=141715130023061&w=2http://marc.info/?l=bugtraq&m=141775427104070&w=2http://marc.info/?l=bugtraq&m=141813976718456&w=2http://marc.info/?l=bugtraq&m=141814011518700&w=2http://marc.info/?l=bugtraq&m=141879378918327&w=2http://marc.info/?l=bugtraq&m=142103967620673&w=2http://marc.info/?l=bugtraq&m=142118135300698&w=2http://marc.info/?l=bugtraq&m=142296755107581&w=2http://marc.info/?l=bugtraq&m=142350196615714&w=2http://marc.info/?l=bugtraq&m=142350298616097&w=2http://marc.info/?l=bugtraq&m=142350743917559&w=2http://marc.info/?l=bugtraq&m=142354438527235&w=2http://marc.info/?l=bugtraq&m=142357976805598&w=2http://marc.info/?l=bugtraq&m=142495837901899&w=2http://marc.info/?l=bugtraq&m=142496355704097&w=2http://marc.info/?l=bugtraq&m=142546741516006&w=2http://marc.info/?l=bugtraq&m=142607790919348&w=2http://marc.info/?l=bugtraq&m=142624590206005&w=2http://marc.info/?l=bugtraq&m=142624619906067http://marc.info/?l=bugtraq&m=142624619906067&w=2http://marc.info/?l=bugtraq&m=142624679706236&w=2http://marc.info/?l=bugtraq&m=142624719706349&w=2http://marc.info/?l=bugtraq&m=142660345230545&w=2http://marc.info/?l=bugtraq&m=142721830231196&w=2http://marc.info/?l=bugtraq&m=142721887231400&w=2http://marc.info/?l=bugtraq&m=142740155824959&w=2http://marc.info/?l=bugtraq&m=142791032306609&w=2http://marc.info/?l=bugtraq&m=142804214608580&w=2http://marc.info/?l=bugtraq&m=142805027510172&w=2http://marc.info/?l=bugtraq&m=142962817202793&w=2http://marc.info/?l=bugtraq&m=143039249603103&w=2http://marc.info/?l=bugtraq&m=143101048219218&w=2http://marc.info/?l=bugtraq&m=143290371927178&w=2http://marc.info/?l=bugtraq&m=143290437727362&w=2http://marc.info/?l=bugtraq&m=143290522027658&w=2http://marc.info/?l=bugtraq&m=143290583027876&w=2http://marc.info/?l=bugtraq&m=143558137709884&w=2http://marc.info/?l=bugtraq&m=143558192010071&w=2http://marc.info/?l=bugtraq&m=143628269912142&w=2http://marc.info/?l=bugtraq&m=144101915224472&w=2http://marc.info/?l=bugtraq&m=144251162130364&w=2http://marc.info/?l=bugtraq&m=144294141001552&w=2http://marc.info/?l=bugtraq&m=145983526810210&w=2http://marc.info/?l=openssl-dev&m=141333049205629&w=2http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1652.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1653.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1692.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1876.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1877.html
+ 387 more references
2014-10-15
Published