The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
Connections 36
has cited scope1 retained · stored CVE-2014-0160 → n/a · n/a90d27e45-1913-407d-9c70-1d6e2f633ce5
has environmental constraint1 retained · stored CVE-2014-0160 → siemens · cp_1543-197716f5f-0501-41d7-b7e8-2453aa8476a7
has environmental constraint1 retained · stored CVE-2014-0160 → siemens · application_processing_engine7e76347f-2c3c-42f2-9546-a98d6f3afc8d
has environmental constraint1 retained · stored CVE-2014-0160 → intellian · v606167e637-6828-4f33-8a43-52399c613de7
has environmental constraint1 retained · stored CVE-2014-0160 → ricon · s9922l84bfc006-b53a-4a20-b2d2-06e771eb05a1
has environmental constraint1 retained · stored CVE-2014-0160 → siemens · simatic_s7-1500b2160460-9d38-4b90-be13-283c59b323b7
has environmental constraint1 retained · stored CVE-2014-0160 → siemens · simatic_s7-1500tc77505a8-3b46-4ee6-917d-22625e64becd
has environmental constraint1 retained · stored CVE-2014-0160 → intellian · v100ab7d8964-9bcd-4455-a004-b2ca9549b138
has vulnerable target scope6 retained · stored CVE-2014-0160 → mitel · micollab323d5cf2-2bd5-4f78-8823-0c18b3459827489189cb-ceeb-40c4-8b1d-21bc8760029d4e70fad7-fcef-41a4-86e1-4ea452ddc59e9c9183aa-eedc-4ce0-8fcb-8a7dd4da1352dec2fe89-bb56-4c3e-96d0-8ae8d44631dfdec770f9-52e3-4b67-b2c3-f8debc4e5624
has vulnerable target scope2 retained · stored CVE-2014-0160 → intellian · v60_firmware0f35c556-384b-4d71-9b4b-3e32081dea775779c9b8-245c-4852-9bcf-bf8d4dc27d60
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_server_eus53cdffc0-df99-4269-b601-68eb7a3d19ea
has vulnerable target scope5 retained · stored CVE-2014-0160 → mitel · mivoice09e48ff4-9dbb-430c-bccd-ef0ad726f2a61efa9164-cbc7-417a-9b73-1039a72a8001886516af-3c34-4373-a344-ae79e9e8e527df2de93a-809b-42bd-83d6-c5454f814493ed4bbafb-3085-43ad-8a71-06ad8c134a11
has vulnerable target scope1 retained · stored CVE-2014-0160 → ricon · s9922l_firmwarea2619070-ef8c-4551-8aa5-e0b32e84ebe2
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · wincc_open_architecturefecbd604-8fe8-45aa-9277-595d4486da7a
has vulnerable target scope3 retained · stored CVE-2014-0160 → debian · debian_linux0aef9f4d-903b-4b0e-a03c-7972d11251f4b4ad8583-739d-43c9-b2f5-9b68e534d7f3d7048371-c7db-427c-bf12-ddfa9c84d35f
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · simatic_s7-1500_firmwareea2ca678-a002-42a5-a87a-5c377bdef295
has vulnerable target scope3 retained · stored CVE-2014-0160 → intellian · v100_firmware777a7b37-f97a-46e5-96b7-a4fce9987680aa25bf50-f456-4558-bf25-cf3327ecb94db11870c8-9710-4daa-9bfd-fd98d02ef3d9
has vulnerable target scope1 retained · stored CVE-2014-0160 → openssl · openssl5b100931-81bd-4782-afda-a5349408831c
has vulnerable target scope2 retained · stored CVE-2014-0160 → opensuse · opensusea4c83b1b-aacd-46d5-bf89-211c51d02e5ba85524a1-78a8-4c11-8be7-d8dccb71c85e
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_server_ausa927391d-da98-4132-b23c-c3ad31f61e86
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_serverd8202cb8-0152-49ff-813a-6bf25055201f
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · simatic_s7-1500t_firmware7542d28d-f4f4-4edf-8e2a-0003c57d6067
has vulnerable target scope3 retained · stored CVE-2014-0160 → canonical · ubuntu_linux1cc12e6a-327a-46d9-a70c-801013ab110532ba269f-369d-4f9d-97ec-4c8a666d9223525d2c87-b37a-4bd4-a4d6-27bafd29c497
has vulnerable target scope1 retained · stored CVE-2014-0160 → filezilla-project · filezilla_servercdc2d750-19fa-48e8-a274-a724fcde0f3d
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_workstation5364f8b2-a5cd-4bf7-b0ae-ca249662bb69
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · cp_1543-1_firmware73d0874c-634b-4c7e-88ae-7bbdeee05c1d
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · virtualizationc6bcbb3d-d23a-4e21-b5a6-dc25ac487d39
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_server_tusfe95d73d-01c2-43cc-9212-426a83405516
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · storageb3bafd2a-c677-45ce-9269-14c874400101
has vulnerable target scope2 retained · stored CVE-2014-0160 → fedoraproject · fedora0c7abf4e-77d5-4258-9348-db9285e445f632b15ad1-a5d7-4060-a307-58262f22e9af
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · elan-8.20473b526-3c73-4807-b8ec-77ebe0e1fdfb
has vulnerable target scope1 retained · stored CVE-2014-0160 → splunk · splunk58a1524f-3977-4291-ba59-b8ae5760ef9d
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · enterprise_linux_desktop9eb0cb93-19e8-4c4e-af5f-53badbfd85c0
has vulnerable target scope1 retained · stored CVE-2014-0160 → siemens · application_processing_engine_firmware094f9786-77b1-4bde-9dc9-32c92d2f0c73
has vulnerable target scope1 retained · stored CVE-2014-0160 → redhat · gluster_storagec84d588e-e4f3-40b1-a648-4528f0502149
has vulnerable target scope2 retained · stored CVE-2014-0160 → broadcom · symantec_messaging_gateway172ae55a-af36-46cf-afcd-9339fd1a269bd0ef4593-49c9-49f8-8d09-b9f50e6fdd48