Описание
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2:3.17.1-0ubuntu1 |
| bionic | not-affected | 2:3.17.1-0ubuntu1 |
| cosmic | not-affected | 2:3.17.1-0ubuntu1 |
| devel | not-affected | 2:3.17.1-0ubuntu1 |
| disco | not-affected | 2:3.17.1-0ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2:3.17.1-0ubuntu0.14.04.1 |
| esm-infra/bionic | not-affected | 2:3.17.1-0ubuntu1 |
| esm-infra/focal | not-affected | 2:3.17.1-0ubuntu1 |
| esm-infra/xenial | not-affected | 2:3.17.1-0ubuntu1 |
| focal | not-affected | 2:3.17.1-0ubuntu1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [6b34-1.13.6-1ubuntu0.14.04.1]] |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [7u75-2.5.4-1~trusty1]] |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1.0.1f-1ubuntu9 |
| bionic | released | 1.0.1f-1ubuntu9 |
| cosmic | released | 1.0.1f-1ubuntu9 |
| devel | released | 1.0.1f-1ubuntu9 |
| disco | released | 1.0.1f-1ubuntu9 |
| esm-infra-legacy/trusty | not-affected | 1.0.1f-1ubuntu2.7 |
| esm-infra/bionic | not-affected | 1.0.1f-1ubuntu9 |
| esm-infra/focal | not-affected | 1.0.1f-1ubuntu9 |
| esm-infra/xenial | not-affected | 1.0.1f-1ubuntu9 |
| fips-preview/jammy | released | 1.0.1f-1ubuntu9 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2.6-6.1 |
| bionic | DNE | |
| cosmic | DNE | |
| devel | needs-triage | |
| disco | DNE | |
| esm-apps/focal | not-affected | 2.6-6.1 |
| esm-apps/jammy | not-affected | 2.6-6.1 |
| esm-apps/xenial | not-affected | 2.6-6.1 |
| esm-infra-legacy/trusty | needed | |
| focal | not-affected | 2.6-6.1 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
3.4 Low
CVSS3
Связанные уязвимости
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...
EPSS
4.3 Medium
CVSS2
3.4 Low
CVSS3