CVE-2014-3566 - Oracle Fabric Interconnect Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack")

Asset ID:	1-79-1964083.1
Update Date:	2017-07-31
Keywords:

Solution Type Predictive Self-Healing Sure

Solution 1964083.1 : CVE-2014-3566 - Oracle Fabric Interconnect Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack")

Applies to:

Oracle Fabric Interconnect F1-15
Oracle Fabric Interconnect F1-4
Information in this document applies to any platform.

Purpose

This document provides instructions to resolve the SSL v3.0 security vulnerability referenced in CVE-2014-3566

Scope

All Oracle Fabric Interconnect F1-4 and Oracle Fabric Interconnect F1-15 products that deploy the following versions of Oracle Fabric Interconnect Firmware:

Versions 3.9.2 or earlier
Versions 4.0.1 or earlier

Details

The following releases have addressed all vulnerabilities as described in Purpose section

Oracle Fabric Interconnect Firmware - XgOS 3.9.3
Oracle Fabric Interconnect Firmware - XgOS 4.0.2

Please refer to documentation below to update your firmware

http://docs.oracle.com/cd/E38500_01/pdf/E54532.pdf

Attachments

This solution has no attachment