View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-3566 unimportant priority: Debian including 14 source packages (bouncycastle, epiphany-browser, …), 61 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 50, open 11.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.