Description
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | erlang | 1:17.3-dfsg-3 | — |
| Debian 14 | gnutls28 | 3.3.8-5 | — |
| Debian 14 | haskell-tls | 1.2.9-2 | — |
| Debian 14 | lighttpd | 1.4.35-4 | — |
| Debian 14 | netsurf | 3.6-1 | — |
| Debian 14 | nss | 2:3.17.1-1 | — |
| Debian 14 | openssl | 1.0.1j-1 | — |
| Debian 14 | pound | 2.6-6 | — |
| Debian 14 | surf +1 | No fix yet | — |
| Debian 13 | erlang | 1:17.3-dfsg-3 | — |
| Debian 13 | gnutls28 | 3.3.8-5 | — |
| Debian 13 | haskell-tls | 1.2.9-2 | — |
| Debian 13 | lighttpd | 1.4.35-4 | — |
| Debian 13 | netsurf | 3.6-1 | — |
| Debian 13 | nss | 2:3.17.1-1 | — |
| Debian 13 | openssl | 1.0.1j-1 | — |
| Debian 13 | pound | 2.6-6 | — |
| Debian 13 | surf +1 | No fix yet | — |
| Debian 13 | wolfssl | 3.4.8+dfsg-1 | — |
| Debian 12 | erlang | 1:17.3-dfsg-3 | — |
| Debian 12 | gnutls28 | 3.3.8-5 | — |
| Debian 12 | haskell-tls | 1.2.9-2 | — |
| Debian 12 | lighttpd | 1.4.35-4 | — |
| Debian 12 | netsurf | 3.6-1 | — |
| Debian 12 | nss | 2:3.17.1-1 | — |
| Debian 12 | openssl | 1.0.1j-1 | — |
| Debian 12 | surf +1 | No fix yet | — |
| Debian 12 | wolfssl | 3.4.8+dfsg-1 | — |
| Debian 8 | pound | 2.6-6+deb8u1 | DSA-3253-1 |
| Debian 7 | icedove | 31.3.0-1~deb7u1 | DSA-3092-1 |
| Debian 7 | lighttpd | 1.4.31-4+deb7u4 | DSA-3489-1 |
| Debian 7 | openjdk-6 | 6b34-1.13.6-1~deb7u1 | DSA-3147-1 |
| Debian 7 | openjdk-7 | 7u75-2.5.4-1~deb7u1 | DSA-3144-1 |
| Debian 7 | pound | 2.6-2+deb7u1 | DSA-3253-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | pound | No fix yet | — |
| Ubuntu 14.04 LTS | openjdk-6 | 6b34-1.13.6-1ubuntu0.14.04.1 | — |
| Ubuntu 14.04 LTS | openjdk-7 | 7u75-2.5.4-1~trusty1 | USN-2487-1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.7 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | pound | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el7_0 | RHSA-2015:0085 |
| RHEL 7 | java-1.7.0-openjdk +6 | 1:1.7.0.75-2.5.4.2.el7_0 | RHSA-2015:0067 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el7_0 | RHSA-2014:1880 |
| RHEL 7 | nspr +1 | 4.10.6-3.el7 | RHBA-2015:0364 |
| RHEL 7 | nss +4 | 3.16.2.3-5.el7 | RHBA-2015:0364 |
| RHEL 7 | nss-softokn +3 | 3.16.2.3-9.el7 | RHBA-2015:0364 |
| RHEL 7 | nss-util +1 | 3.16.2.3-2.el7 | RHBA-2015:0364 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.8-1jpp.1.el6_6 | RHSA-2014:1881 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.2-1jpp.1.el6_6 | RHSA-2014:1877 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el6_6 | RHSA-2015:0085 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el6_6 | RHSA-2014:1882 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.75-2.5.4.0.el6_6 | RHSA-2015:0067 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el6_6 | RHSA-2014:1880 |
| RHEL 6 | java-1.8.0-openjdk +5 | 1:1.8.0.31-1.b13.el6_6 | RHSA-2015:0069 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.8-1jpp.1.el5 | RHSA-2014:1881 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.2-1jpp.1.el5 | RHSA-2014:1877 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el5_11 | RHSA-2015:0085 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el5 | RHSA-2014:1876 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.75-2.5.4.0.el5_11 | RHSA-2015:0068 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | katello-agent | 1.5.3-6.el6sat | RHBA-2014:1857 |
| Red Hat Satellite Capsule 6 | pulp +16 | 2.4.3-1.el6sat | RHBA-2014:1857 |
| Red Hat Satellite Capsule 6 | pulp-nodes +3 | 2.4.3-0.1.beta.el6sat | RHBA-2014:1857 |
| Red Hat Satellite Capsule 6 | rubygem-apipie-bindings | 0.0.8-2.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | candlepin +2 | 0.9.23.1-1.el6 | RHBA-2014:1857 |
| Red Hat Satellite 6 | candlepin-tomcat | 0.9.23.1-1.el7 | RHBA-2014:1857 |
| Red Hat Satellite 6 | foreman +6 | 1.6.0.49-1.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | katello-agent | 1.5.3-6.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | pulp +17 | 2.4.3-1.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | pulp-nodes +3 | 2.4.3-0.1.beta.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | ruby193-rubygem-katello | 1.5.0-93.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | rubygem-apipie-bindings | 0.0.8-2.el6sat | RHBA-2014:1857 |
| Red Hat Satellite 6 | rubygem-hammer_cli_import | 0.10.4-1.3.el6sat | RHBA-2014:1857 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el7 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.2.el7 | RHSA-2015:0079 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el6 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.1.el6 | RHSA-2015:0079 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.8.0-oracle +5 | 1:1.8.0.31-1jpp.1.el6 | RHSA-2015:0080 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el5_11 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.1.el5_11 | RHSA-2015:0079 |
| Red Hat OpenShift 2 | openshift-origin-node-proxy | 1.16.4.2-1.el6op | RHSA-2015:1546, RHSA-2015:1545 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0264 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | libreoffice | 7.2.3.2-48.11.4 | SUSE-FU-2022:0039-1 |
| SLES 12 SP5 | libserf | 1.3.9-9.5.3 | SUSE-FU-2022:0039-1 |
| SLES 12 SP5 | zxing-cpp | 1.2.0-8.3.3 | SUSE-FU-2022:0039-1 |
| SLES 12 SP1 | apache2-mod_nss | 1.0.14-18.3 | SUSE-SU-2016:2285-1 |
| SLES 12 SP1 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | PackageKit | 0.8.16-11.15 | SUSE-RU-2015:1175-1 |
| SLES 12 | apache2-mod_nss | 1.0.14-10.14.3 | SUSE-SU-2016:2396-1 |
| SLES 12 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES 12 | gnome-packagekit | 3.10.1-8.13 | SUSE-RU-2015:1175-1 |
| SLES 12 | java-1_7_0-openjdk | 1.7.0.75-11.3 | SUSE-SU-2015:0503-1 |
| SLES 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libsolv | 0.6.11-8.1 | SUSE-RU-2015:1175-1 |
| SLES 12 | libyui-ncurses-pkg | 2.46.1-3.4 | SUSE-RU-2015:1175-1 |
| SLES 12 | libyui-qt-pkg | 2.44.7-3.2 | SUSE-RU-2015:1175-1 |
| SLES 12 | libzypp | 14.39.0-10.1 | SUSE-RU-2015:1175-1 |
| SLES 12 | libzypp-bindings | 0.6.4-5.3 | SUSE-RU-2015:1175-1 |
| SLES 12 | yast2-pkg-bindings | 3.1.20-3.3 | SUSE-RU-2015:1175-1 |
| SLES 12 | zypper | 1.11.32-8.1 | SUSE-RU-2015:1175-1 |
| SLES 11 SP4 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SLES 11 SP4 | cyrus-imapd | 2.3.11-60.65.67.1 | SUSE-SU-2016:1459-1 |
| SLES 11 SP3 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP2 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SLES for SAP 12 SP1 | apache2-mod_nss | 1.0.14-18.3 | SUSE-SU-2016:2285-1 |
| SLES for SAP 12 SP1 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES for SAP 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | PackageKit | 0.8.16-11.15 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | apache2-mod_nss | 1.0.14-10.14.3 | SUSE-SU-2016:2396-1 |
| SLES for SAP 12 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES for SAP 12 | gnome-packagekit | 3.10.1-8.13 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | java-1_7_0-openjdk | 1.7.0.75-11.3 | SUSE-SU-2015:0503-1 |
| SLES for SAP 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libsolv | 0.6.11-8.1 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | libyui-ncurses-pkg | 2.46.1-3.4 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | libyui-qt-pkg | 2.44.7-3.2 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | libzypp | 14.39.0-10.1 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | libzypp-bindings | 0.6.4-5.3 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | yast2-pkg-bindings | 3.1.20-3.3 | SUSE-RU-2015:1175-1 |
| SLES for SAP 12 | zypper | 1.11.32-8.1 | SUSE-RU-2015:1175-1 |
| SLES for SAP 11 SP4 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SLES for SAP 11 SP4 | cyrus-imapd | 2.3.11-60.65.67.1 | SUSE-SU-2016:1459-1 |
| SUSE OpenStack Cloud 5 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SUSE Manager Proxy 2.1 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SUSE Manager 2.1 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | apache2-mod_nss | 1.0.14-0.4.25.1 | SUSE-SU-2016:2329-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache2-mod_nss | 1.0.14-4.1 | openSUSE-SU-2024:10311-1 |
| openSUSE Tumbleweed | fossil | 1.35-1.3 | openSUSE-SU-2024:10479-1 |
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
| openSUSE Tumbleweed | monit | 5.20.0-1.1 | openSUSE-SU-2024:10275-1 |
| openSUSE Tumbleweed | slrn | 1.0.3-3.13 | openSUSE-SU-2024:11388-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.0.1.el5_11 | ELSA-2015-0085 |
| Oracle Linux 7 | java-1.7.0-openjdk +6 | 1:1.7.0.75-2.5.4.2.0.1.el7_0 | ELSA-2015-0067 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
SSL/TLS Version Detection
auxiliary/scanner/ssl/ssl_version
GitHub 7 repositories
-
mpgn/poodle-PoC ★ 268 · Feb 3, 2015
:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:
-
mikesplain/CVE-2014-3566-poodle-cookbook ★ 3 · Oct 16, 2014
-
jmonge12/Home-Network-Vulnerability-Assessment ★ 0 · May 30, 2026
Auditoría de seguridad y análisis de vulnerabilidades (CVE-2014-3566 y CVE-2010-2333) en la infraestructura de red local y router residencial.
-
josecl200/VC-PoodlePOC ★ 0 · Apr 26, 2026
Vibe coded POC of exploitation of the POODLE CVE-2014-3566
-
GoRuGoo/poodle-attack-sandbox ★ 0 · Nov 14, 2024
Test code for poodle attack (CVE-2014-3566)
-
uthrasri/openssl_g2.5_CVE-2014-3566 ★ 0 · Nov 7, 2023
-
cloudpassage/mangy-beast ★ 0 · Oct 20, 2014
CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 47
- RHSA-2015:1545 Red Hat Security Advisory: node.js security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1546 Red Hat Security Advisory: node.js security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0264 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0085 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0086 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0080 Red Hat Security Advisory: java-1.8.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0079 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0069 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0068 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0067 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2015:0364 Red Hat Bug Fix Advisory: nss, nss-softokn, nss-util, and nspr bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1881 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1882 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1880 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1877 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1876 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2014:1857 Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-2487-1 openjdk-7 vulnerabilities Ubuntu Security Notices (USN) · May 29, 2026
- DLA-157-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-282-1 lighttpd - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3092-1 icedove - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3253-1 pound - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3489-1 lighttpd - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3144-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-400-1 pound - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3147-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2015:0503-1 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2329-1 Security update for apache2-mod_nss SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Forbidden-1 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1457-1 Security update for cyrus-imapd SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10479-1 fossil-1.35-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10275-1 monit-5.20.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10311-1 apache2-mod_nss-1.0.14-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2396-1 Security update for apache2-mod_nss SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1459-1 Security update for cyrus-imapd SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2025-1658 Oracle Java SE und Oracle JRockit : Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 28, 2025
- openSUSE-SU-2024:11388-1 slrn-1.0.3-3.13 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-RU-2015:1175-1 Recommended update for Package Management Stack SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2016:2285-1 Security update for apache2-mod_nss SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-FU-2022:0039-1 Feature update for zxing-cpp libreoffice SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2023-0431 SSL 3.0: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Apr 16, 2023
- ICSMA-18-058-02 Philips Intellispace Portal ISP Vulnerabilities CISA ICS & IT advisories · Feb 27, 2018
- ELSA-2015-0085 Important: java-1.6.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 26, 2015
- ELSA-2015-0067 Critical: java-1.7.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 21, 2015
References
- HPSBOV03227 vendor-advisory
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
- 1031090 vdb-entry
- http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/
- RHSA-2014:1880 vendor-advisory
- HPSBHF03300 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
- VU#577193 third-party-advisory
- HPSBMU03184 vendor-advisory
- HPSBGN03209 vendor-advisory
- openSUSE-SU-2014:1331 vendor-advisory
- https://support.apple.com/kb/HT6542
- 1031106 vdb-entry
- HPSBGN03201 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- [openssl-dev] 20141014 Patch to mitigate CVE-2014-3566 ("POODLE") mailing-list
- SSRT101898 vendor-advisory
- SSRT101896 vendor-advisory
- 60056 third-party-advisory
- RHSA-2014:1877 vendor-advisory
- HPSBUX03162 vendor-advisory
- 61130 third-party-advisory
- RHSA-2015:1546 vendor-advisory
- SUSE-SU-2015:0503 vendor-advisory
- https://support.apple.com/kb/HT6529
- https://www.openssl.org/news/secadv_20141015.txt
- APPLE-SA-2014-10-16-3 vendor-advisory
- http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
- RHSA-2014:1920 vendor-advisory
- 1031087 vdb-entry
- HPSBMU03234 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- https://bto.bluecoat.com/security-advisory/sa83
- SSRT101849 vendor-advisory
- http://support.citrix.com/article/CTX200238
- 61359 third-party-advisory
- https://support.apple.com/kb/HT6541
- 1031093 vdb-entry
- 1031132 vdb-entry
- DSA-3144 vendor-advisory
- SSRT101790 vendor-advisory
- DSA-3253 vendor-advisory
- SSRT101846 vendor-advisory
- http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
- https://www.suse.com/support/kb/doc.php?id=7015773
- APPLE-SA-2014-10-16-4 vendor-advisory
- https://www.elastic.co/blog/logstash-1-4-3-released
- SSRT101854 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
- HPSBST03195 vendor-advisory
- 61827 third-party-advisory
- HPSBMU03152 vendor-advisory
- RHSA-2015:0079 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283
- HPSBMU03304 vendor-advisory
- https://technet.microsoft.com/library/security/3009008.aspx
- RHSA-2015:1545 vendor-advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21688165