Cryptographic Issues The advisory has been revoked - it doesn't affect any version of package openssl Open this link in a new tab

Threat Intelligence

EPSS 97.49% (100^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-COCOAPODS-OPENSSL-471244
published 2 Oct 2019
disclosed 14 May 2014
credit Unknown

Report a new vulnerability Found a mistake?

Introduced: 14 May 2014

CVE-2014-3566 Open this link in a new tab CWE-310 Open this link in a new tab

Amendment

This was deemed not a vulnerability.

Overview

OpenSSL is a SSL/TLS and Crypto toolkit. Deprecated in Mac OS and gone in iOS, this spec gives your project non-deprecated OpenSSL support.

Affected versions of this package are vulnerable to Cryptographic Issues. OpenSSL is vulnerable to information disclosure. This is possible because the SSL protocol 3.0 uses a nondeterministic CBC padding allowing attackers to perform man-in-the-middle (MitM) attacks. This is also known as the POODLE issue.

Cryptographic Issues The advisory has been revoked - it doesn't affect any version of package openssl Open this link in a new tab

Threat Intelligence

Introduced: 14 May 2014

Amendment

Overview

References