漏洞描述
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
secunia.comhttp://secunia.com/advisories/60859↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021431↗lists.apache.orghttps://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E↗marc.infohttp://marc.info/?l=bugtraq&m=142495837901899&w=2↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html↗www.debian.orghttp://www.debian.org/security/2015/dsa-3253↗marc.infohttp://marc.info/?l=bugtraq&m=142804214608580&w=2↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html↗secunia.comhttp://secunia.com/advisories/61825↗marc.infohttp://marc.info/?l=bugtraq&m=142350298616097&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031095↗marc.infohttp://marc.info/?l=bugtraq&m=141477196830952&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1876.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1031096↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-1546.html↗marc.infohttp://marc.info/?l=bugtraq&m=142496355704097&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=143039249603103&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=142721830231196&w=2↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html↗marc.infohttp://marc.info/?l=bugtraq&m=142740155824959&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=144101915224472&w=2↗h20564.www2.hpe.comhttp://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1031090↗www.securitytracker.comhttp://www.securitytracker.com/id/1031131↗marc.infohttp://marc.info/?l=bugtraq&m=142624679706236&w=2↗www.elastic.cohttps://www.elastic.co/blog/logstash-1-4-3-released↗marc.infohttp://marc.info/?l=bugtraq&m=141879378918327&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031039↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html↗marc.infohttp://marc.info/?l=bugtraq&m=142962817202793&w=2↗secunia.comhttp://secunia.com/advisories/61819↗www.debian.orghttp://www.debian.org/security/2015/dsa-3147↗www1.huawei.comhttp://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm↗marc.infohttp://marc.info/?l=bugtraq&m=143558137709884&w=2↗support.apple.comhttps://support.apple.com/HT205217↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html↗marc.infohttp://marc.info/?l=bugtraq&m=141450452204552&w=2↗www.dfranke.ushttps://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html↗www.imperialviolet.orghttps://www.imperialviolet.org/2014/10/14/poodle.html↗marc.infohttp://marc.info/?l=openssl-dev&m=141333049205629&w=2↗secunia.comhttp://secunia.com/advisories/61782↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html↗marc.infohttp://marc.info/?l=bugtraq&m=144294141001552&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031130↗www.securitytracker.comhttp://www.securitytracker.com/id/1031132↗blogs.oracle.comhttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6↗advisories.mageia.orghttp://advisories.mageia.org/MGASA-2014-0416.html↗www.us-cert.govhttp://www.us-cert.gov/ncas/alerts/TA14-290A↗kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10090↗lists.apple.comhttp://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html↗blog.cryptographyengineering.comhttp://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html↗marc.infohttp://marc.info/?l=bugtraq&m=141577087123040&w=2↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/577193↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html↗secunia.comhttp://secunia.com/advisories/61130↗tools.cisco.comhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle↗lists.apache.orghttps://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E↗www-01.ibm.comhttps://www-01.ibm.com/support/docview.wss?uid=swg21688165↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html↗marc.infohttp://marc.info/?l=bugtraq&m=142791032306609&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1882.html↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2015-0003.html↗secunia.comhttp://secunia.com/advisories/61345↗marc.infohttp://marc.info/?l=bugtraq&m=141620103726640&w=2↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html↗marc.infohttp://marc.info/?l=bugtraq&m=142721887231400&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031091↗technet.microsoft.comhttps://technet.microsoft.com/library/security/3009008.aspx↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635↗marc.infohttp://marc.info/?l=bugtraq&m=142357976805598&w=2↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html↗marc.infohttp://marc.info/?l=bugtraq&m=142103967620673&w=2↗secunia.comhttp://secunia.com/advisories/61995↗www.securitytracker.comhttp://www.securitytracker.com/id/1031124↗www.securitytracker.comhttp://www.securitytracker.com/id/1031086↗marc.infohttp://marc.info/?l=bugtraq&m=142350743917559&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0080.html↗support.apple.comhttps://support.apple.com/kb/HT6531↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html↗lists.apache.orghttps://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E↗support.apple.comhttp://support.apple.com/HT204244↗marc.infohttp://marc.info/?l=bugtraq&m=143290522027658&w=2↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html↗secunia.comhttp://secunia.com/advisories/61019↗security.gentoo.orghttps://security.gentoo.org/glsa/201606-11↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21692299↗marc.infohttp://marc.info/?l=bugtraq&m=142350196615714&w=2↗support.apple.comhttps://support.apple.com/kb/HT6535↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html↗marc.infohttp://marc.info/?l=bugtraq&m=141697638231025&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031105↗marc.infohttp://marc.info/?l=bugtraq&m=143628269912142&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0085.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1031107↗marc.infohttp://marc.info/?l=bugtraq&m=141703183219781&w=2↗blog.mozilla.orghttps://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/↗people.canonical.comhttp://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html↗marc.infohttp://marc.info/?l=bugtraq&m=142296755107581&w=2↗security.netapp.comhttps://security.netapp.com/advisory/ntap-20141015-0001/↗marc.infohttp://marc.info/?l=bugtraq&m=143290371927178&w=2↗lists.apache.orghttps://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E↗puppet.comhttps://puppet.com/security/cve/poodle-sslv3-vulnerability↗aix.software.ibm.comhttp://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21688283↗www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021439↗templatelab.comhttps://templatelab.com/ssl-poodle/↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21687611↗www.securitytracker.comhttp://www.securitytracker.com/id/1031085↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1652.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html↗downloads.asterisk.orghttp://downloads.asterisk.org/pub/security/AST-2014-011.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html↗marc.infohttp://marc.info/?l=bugtraq&m=143558192010071&w=2↗devcentral.f5.comhttps://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip↗bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa83↗www.securitytracker.comhttp://www.securitytracker.com/id/1031093↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1692.html↗marc.infohttp://marc.info/?l=bugtraq&m=142624619906067↗www.securitytracker.comhttp://www.securitytracker.com/id/1031092↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/533724/100/0/threaded↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html↗marc.infohttp://marc.info/?l=bugtraq&m=142354438527235&w=2↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681↗marc.infohttp://marc.info/?l=bugtraq&m=141775427104070&w=2↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667↗groups.google.comhttps://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21687172↗bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1152789↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0264.html↗h20564.www2.hp.comhttp://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581↗marc.infohttp://marc.info/?l=bugtraq&m=143290583027876&w=2↗www.ubuntu.comhttp://www.ubuntu.com/usn/USN-2486-1↗support.apple.comhttps://support.apple.com/kb/HT6536↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0068.html↗www.debian.orghttp://www.debian.org/security/2015/dsa-3144↗marc.infohttp://marc.info/?l=bugtraq&m=142805027510172&w=2↗secunia.comhttp://secunia.com/advisories/61810↗lists.apache.orghttps://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E↗support.citrix.comhttps://support.citrix.com/article/CTX216642↗marc.infohttp://marc.info/?l=bugtraq&m=141697676231104&w=2↗secunia.comhttp://secunia.com/advisories/59627↗secunia.comhttp://secunia.com/advisories/61359↗marc.infohttp://marc.info/?l=bugtraq&m=141576815022399&w=2↗www.cloudera.comhttps://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/533746↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1948.html↗marc.infohttp://marc.info/?l=bugtraq&m=141814011518700&w=2↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2014:203↗www.debian.orghttp://www.debian.org/security/2016/dsa-3489↗access.redhat.comhttps://access.redhat.com/articles/1232123↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0698.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0079.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686997↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:062↗marc.infohttp://marc.info/?l=bugtraq&m=141715130023061&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031029↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1653.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-1545.html↗secunia.comhttp://secunia.com/advisories/61926↗kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10091↗marc.infohttp://marc.info/?l=bugtraq&m=141813976718456&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=141577350823734&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1920.html↗secunia.comhttp://secunia.com/advisories/61827↗marc.infohttp://marc.info/?l=bugtraq&m=141450973807288&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=144251162130364&w=2↗support.apple.comhttps://support.apple.com/kb/HT6541↗support.lenovo.comhttps://support.lenovo.com/product_security/poodle↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html↗secunia.comhttp://secunia.com/advisories/60792↗support.apple.comhttps://support.apple.com/kb/HT6529↗support.apple.comhttps://support.apple.com/kb/HT6542↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2015-0086.html↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/533747↗lists.apple.comhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1031094↗support.lenovo.comhttps://support.lenovo.com/us/en/product_security/poodle↗www.securitytracker.comhttp://www.securitytracker.com/id/1031120↗www.websense.comhttp://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0↗marc.infohttp://marc.info/?l=bugtraq&m=142660345230545&w=2↗www.securitytracker.comhttp://www.securitytracker.com/id/1031123↗lists.apache.orghttps://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E↗marc.infohttp://marc.info/?l=bugtraq&m=143290437727362&w=2↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html↗marc.infohttp://marc.info/?l=bugtraq&m=142546741516006&w=2↗blogs.technet.comhttp://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1881.html↗secunia.comhttp://secunia.com/advisories/61316↗www.openssl.orghttps://www.openssl.org/news/secadv_20141015.txt↗askubuntu.comhttp://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566↗marc.infohttp://marc.info/?l=bugtraq&m=142624719706349&w=2↗docs.ipswitch.comhttp://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1880.html↗marc.infohttp://marc.info/?l=bugtraq&m=143101048219218&w=2↗security.gentoo.orghttps://security.gentoo.org/glsa/201507-14↗secunia.comhttp://secunia.com/advisories/61303↗bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=1076983↗marc.infohttp://marc.info/?l=bugtraq&m=145983526810210&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=141628688425177&w=2↗archives.neohapsis.comhttp://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html↗www.securityfocus.comhttp://www.securityfocus.com/bid/70574↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1031089↗marc.infohttp://marc.info/?l=bugtraq&m=142118135300698&w=2↗www.ubuntu.comhttp://www.ubuntu.com/usn/USN-2487-1↗www.debian.orghttp://www.debian.org/security/2014/dsa-3053↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-1877.html↗marc.infohttp://marc.info/?l=bugtraq&m=142624619906067&w=2↗archives.neohapsis.comhttp://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html↗secunia.comhttp://secunia.com/advisories/60056↗ics-cert.us-cert.govhttps://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02↗www.suse.comhttps://www.suse.com/support/kb/doc.php?id=7015773↗www.securitytracker.comhttp://www.securitytracker.com/id/1031087↗secunia.comhttp://secunia.com/advisories/60206↗www.securitytracker.comhttp://www.securitytracker.com/id/1031088↗support.citrix.comhttp://support.citrix.com/article/CTX200238↗marc.infohttp://marc.info/?l=bugtraq&m=141694355519663&w=2↗support.apple.comhttps://support.apple.com/kb/HT6527↗www.openssl.orghttps://www.openssl.org/~bodo/ssl-poodle.pdf↗marc.infohttp://marc.info/?l=bugtraq&m=142624590206005&w=2↗blog.nodejs.orghttp://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/↗kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10104↗www.securitytracker.comhttp://www.securitytracker.com/id/1031106↗marc.infohttp://marc.info/?l=bugtraq&m=142607790919348&w=2↗