7.5 Élevée Exploitée Heartbleed

CVE-2014-0160 OpenSSL Information Disclosure Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-125

Description

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
n/a	Versions non publiées

Références

support.f5.com support.f5.com
1030077 www.securitytracker.com
20140408 heartbleed OpenSSL bug CVE-2014-0160 seclists.org
www.getchef.com www.getchef.com
DSA-2896 www.debian.org
HPSBGN03008 marc.info
HPSBMU03024 marc.info
RHSA-2014:0396 rhn.redhat.com
HPSBHF03021 marc.info
HPSBHF03136 marc.info
VU#720951 www.kb.cert.org
www.splunk.com www.splunk.com
HPSBMU03033 marc.info
www.websense.com www.websense.com
www.apcmedia.com www.apcmedia.com
HPSBGN03011 marc.info
www-01.ibm.com www-01.ibm.com
www.vmware.com www.vmware.com
openSUSE-SU-2014:0492 lists.opensuse.org
SSRT101846 marc.info
20140409 Re: heartbleed OpenSSL bug CVE-2014-0160 seclists.org
HPSBMU03037 marc.info
1030080 www.securitytracker.com
57836 secunia.com
www-01.ibm.com www-01.ibm.com
HPSBMU03012 marc.info
HPSBST03001 marc.info
66690 www.securityfocus.com
www.innominate.com www.innominate.com
filezilla-project.org filezilla-project.org
HPSBMU03023 marc.info
57483 secunia.com
20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products tools.cisco.com
www.kerio.com www.kerio.com
advisories.mageia.org advisories.mageia.org
www.blackberry.com www.blackberry.com
HPSBMU03044 marc.info
HPSBMU03030 marc.info
1030081 www.securitytracker.com
FEDORA-2014-4879 lists.fedoraproject.org
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities www.securityfocus.com
FEDORA-2014-4910 lists.fedoraproject.org
bugzilla.redhat.com bugzilla.redhat.com
FEDORA-2014-9308 lists.fedoraproject.org
www-01.ibm.com www-01.ibm.com
HPSBMU03013 marc.info
1030079 www.securitytracker.com
RHSA-2014:0377 rhn.redhat.com
HPSBMU02995 marc.info
HPSBPI03031 marc.info
code.google.com code.google.com
HPSBMU02999 marc.info
HPSBGN03010 marc.info
HPSBMU03029 marc.info
www.getchef.com www.getchef.com
heartbleed.com heartbleed.com
HPSBMU03018 marc.info
download.schneider-electric.com download.schneider-electric.com
HPSBMU03040 marc.info
cogentdatahub.com cogentdatahub.com
HPSBMU03025 marc.info
HPSBST03016 marc.info
HPSBMU03028 marc.info
HPSBMU03009 marc.info
www.f-secure.com www.f-secure.com
TA14-098A www.us-cert.gov
57347 secunia.com
[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released lists.balabit.hu
20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL seclists.org
blog.torproject.org blog.torproject.org
www.oracle.com www.oracle.com
www.oracle.com www.oracle.com
support.f5.com support.f5.com
git.openssl.org git.openssl.org
HPSBST03000 h20566.www2.hp.com
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities seclists.org
HPSBST03004 marc.info
USN-2165-1 www.ubuntu.com
RHSA-2014:0378 rhn.redhat.com
HPSBMU02997 marc.info
SUSE-SA:2014:002 lists.opensuse.org
32764 www.exploit-db.com
HPSBMU02994 marc.info
www.symantec.com www.symantec.com
HPSBMU03022 marc.info
HPSBST03027 marc.info
HPSBMU03019 marc.info
HPSBMU03062 marc.info
20140408 Re: heartbleed OpenSSL bug CVE-2014-0160 seclists.org
1030078 www.securitytracker.com
59243 secunia.com
www-01.ibm.com www-01.ibm.com
HPSBMU03020 marc.info
HPSBST03015 marc.info
RHSA-2014:0376 rhn.redhat.com
HPSBPI03014 marc.info
MDVSA-2015:062 www.mandriva.com
www.cert.fi www.cert.fi
57721 secunia.com
57968 secunia.com
blog.fox-it.com blog.fox-it.com
public.support.unisys.com public.support.unisys.com
openSUSE-SU-2014:0560 lists.opensuse.org
HPSBMU03032 marc.info
1030082 www.securitytracker.com
HPSBMU02998 marc.info
32745 www.exploit-db.com
20140412 Re: heartbleed OpenSSL bug CVE-2014-0160 seclists.org
www.getchef.com www.getchef.com
HPSBMU03017 marc.info
www.mitel.com www.mitel.com
www.openssl.org www.openssl.org
gist.github.com gist.github.com
public.support.unisys.com public.support.unisys.com
1030074 www.securitytracker.com
support.citrix.com support.citrix.com
59139 secunia.com
www.getchef.com www.getchef.com
57966 secunia.com
1030026 www.securitytracker.com
59347 secunia.com
[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ lists.apache.org
[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ lists.apache.org
sku11army.blogspot.com sku11army.blogspot.com
[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/ lists.apache.org
cert-portal.siemens.com cert-portal.siemens.com
[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/ lists.apache.org
yunus-shn.medium.com yunus-shn.medium.com

Chronologie

Publiée 7 avril 2014
Ajoutée au catalogue KEV 4 mai 2022
Dernière modification 22 octobre 2025

Les 144658 CVE de n/a →

CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Non notée CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Non notée CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Non notée CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Non notée

Suivre cette CVE