CVE-2014-3566: Apple Mac OS X
Low severity, CVSS 3.4. EPSS: 100% chance of exploitation in the next 30 days.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Affected products
- Apple Mac OS X: up to and including 10.10.1
- Debian Debian Linux: version 7.0 only; version 8.0 only
- Fedoraproject Fedora: version 19 only; version 20 only; version 21 only
- IBM Aix: version 5.3 only; version 6.1 only; version 7.1 only
- IBM Vios: version 2.2.0.10 only; version 2.2.0.11 only; version 2.2.0.12 only; version 2.2.0.13 only; version 2.2.1.0 only; version 2.2.1.1 only; …
- Mageia Mageia: version 3.0 only; version 4.0 only
- Netbsd Netbsd: version 5.1 only; version 5.1.1 only; version 5.1.2 only; version 5.1.3 only; version 5.1.4 only; version 5.2 only; …
- Novell Suse Linux Enterprise Desktop: version 9.0 only; version 10.0 only; version 11.0 only; version 12.0 only
- Novell Suse Linux Enterprise Server: version 11.0 only; version 12.0 only
- Novell Suse Linux Enterprise Software Development Kit: version 11.0 only; version 12.0 only
- OpenSSL OpenSSL: version 0.9.8 only; version 0.9.8a only; version 0.9.8b only; version 0.9.8c only; version 0.9.8d only; version 0.9.8e only; …
- Opensuse Opensuse: version 12.3 only; version 13.1 only
- Oracle Database: version 11.2.0.4 only; version 12.1.0.2 only
- Red Hat Enterprise Linux: version 5 only
- Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Desktop Supplementary: version 5.0 only; version 6.0 only
- Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Server Supplementary: version 5.0 only; version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Workstation: version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Workstation Supplementary: version 6.0 only; version 7.0 only
Published 2014-10-15. Last modified 2026-06-17.