POODLE
Sign in to saveAlso known as Padding Oracle On Downgraded Legacy Encryption, POODLE attack, POODLE vulnerability
POODLE (which stands for "Padding Oracle On Downgraded Legacy Encryption") is a security vulnerability which takes advantage of the fallback to SSL 3.0. If attackers successfully exploit this vulnerability, on average, they only need to make 256 SSL 3.0 requests to reveal one byte of encrypted messages. Bodo Möller, Thai Duong and Krzysztof Kotowicz from the Google Security Team discovered this vulnerability; they disclosed the vulnerability publicly on October 14, 2014 (despite the paper being dated "September 2014"). On December 8, 2014, a variation of the POODLE vulnerability that affected
Key facts
- Bug.CVE
- CVE-2014-3566
- Bug.name
- POODLE
- Bug.discoverer
- Bodo Möller, Thai Duong, Krzysztof Kotowicz (Google Security Team)
- Bug.affected software
- Any software that uses or supports a fallback to SSL 3.0
via Wikipedia infobox
Wikidata facts
Show 1 more fact
- time of discovery or invention
- 2014-10-14
via Wikidata · CC0
~5 min read
Article
4 sectionsContents
- Prevention
- POODLE attack against TLS
- References
- External links
POODLE (which stands for "Padding Oracle On Downgraded Legacy Encryption") is a security vulnerability which takes advantage of the fallback to SSL 3.0. If attackers successfully exploit this vulnerability, on average, they only need to make 256 SSL 3.0 requests to reveal one byte of encrypted messages. Bodo Möller, Thai Duong and Krzysztof Kotowicz from the Google Security Team discovered this vulnerability; they disclosed the vulnerability publicly on October 14, 2014 (despite the paper being dated "September 2014"). On December 8, 2014, a variation of the POODLE vulnerability that affected TLS was announced.
The CVE-ID associated with the original POODLE attack is . F5 Networks filed for as well, see POODLE attack against TLS section below.