{"id":"CVE-2014-0160","published":"2014-04-07T22:55:03Z","modified":"2026-06-17T00:02:24Z","title":"OpenSSL Information Disclosure Vulnerability","vendor":"OpenSSL","product":"OpenSSL","tier":"core","eol":null,"description":{"text":"The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","provenance":"source","from":"NVD"},"summary":{"text":"The OpenSSL TLS and DTLS implementations in the OpenSSL library mishandle Heartbeat Extension packets, causing a buffer over-read in the d1_both.c and t1_lib.c components. A remote attacker with no authentication and no user interaction can send crafted Heartbeat packets to read sensitive information from process memory, such as private keys, provided the affected versions (1.0.1 before 1.0.1g) are in use.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:06:44Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"NVD"},"epss":{"score":0.99999,"percentile":0.99996,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-05-04","dueDate":"2022-05-25","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0160","provenance":"source"},"vulncheckKev":{"dateAdded":"2016-09-29","exploitedFirstSeen":"2016-09-29","ransomware":false,"evidence":[{"url":"https://cisa.gov/news-events/alerts/2015/04/29/top-30-targeted-high-risk-vulnerabilities","date":"2016-09-29"},{"url":"https://www.us-cert.gov/ncas/alerts/TA15-119A","date":"2016-09-29"},{"url":"https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/leafminer-espionage-middle-east","date":"2018-07-25"},{"url":"https://www.ic3.gov/Media/News/2022/220126.pdf","date":"2022-01-26"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-05-04"},{"url":"https://www.csoonline.com/article/2096402/most-attacks-affecting-smbs-target-five-older-vulnerabilities.html","date":"2024-04-30"},{"url":"https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-landscape-report-2h-2023.pdf","date":"2024-05-06"},{"url":"https://blog.checkpoint.com/security/april-2024s-most-wanted-malware-surge-in-androxgh0st-attacks-and-the-decline-of-lockbit3/","date":"2024-05-09"},{"url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/2024_Trustwave_Public_Sector_Threat_Landscape.pdf","date":"2024-05-14"},{"url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/2024_Trustwave_Professional_Services_Sector_Threat_Landscape.pdf","date":"2024-06-26"}],"evidenceTotal":14,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-125","name":"Out-of-bounds Read"}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","tags":["Third Party Advisory"]},{"url":"http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://cogentdatahub.com/ReleaseNotes.html","tags":["Release Notes"]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01","tags":["Broken Link"]},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3","tags":["Broken Link"]},{"url":"http://heartbleed.com/","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139722163017074&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757726426985&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757819327350&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757919027752&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139758572430452&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139765756720506&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774054614965&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774703817488&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139808058921905&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817685517037&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817727317190&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817782017443&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824923705461&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824993005633&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139833395230364&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835815211508&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835844111589&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139836085512508&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139842151128341&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139843768401936&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869720529462&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869891830365&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889113431619&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889295732144&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905202427693&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905243827825&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905295427946&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905351928096&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905405728262&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905458328378&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905653828999&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905868529690&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140015787404650&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140075368411126&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140724451518351&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141287864628122&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1","tags":["Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0376.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0377.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0378.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0396.html","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/109","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/173","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/190","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/90","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/91","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57347","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57483","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57721","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57836","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57966","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57968","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59139","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59243","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140605","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670161","tags":["Broken Link"]},{"url":"http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB35882","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2896","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/32745","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/32764","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-1","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/","tags":["Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","tags":["Release Notes"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/720951","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140407.txt","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["Broken Link","Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66690","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030026","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030074","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030077","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030078","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030079","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030080","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030081","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030082","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2165-1","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-098A","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["Broken Link"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","tags":["Broken Link"]},{"url":"https://blog.torproject.org/blog/openssl-bug-cve-2014-0160","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084875","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf","tags":["Third Party Advisory"]},{"url":"https://code.google.com/p/mod-spdy/issues/detail?id=85","tags":["Issue Tracking"]},{"url":"https://filezilla-project.org/versions.php?type=server","tags":["Release Notes"]},{"url":"https://gist.github.com/chapmajs/10473815","tags":["Exploit"]},{"url":"https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html","tags":["Exploit","Permissions Required","Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217","tags":["Third Party Advisory"]},{"url":"https://www.cert.fi/en/reports/2014/vulnerability788210.html","tags":["Not Applicable","Third Party Advisory"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","tags":["Third Party Advisory"]},{"url":"https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","tags":["Third Party Advisory"]},{"url":"http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://cogentdatahub.com/ReleaseNotes.html","tags":["Release Notes"]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01","tags":["Broken Link"]},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3","tags":["Broken Link"]},{"url":"http://heartbleed.com/","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139722163017074&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757726426985&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757819327350&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757919027752&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139758572430452&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139765756720506&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774054614965&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774703817488&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139808058921905&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817685517037&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817727317190&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817782017443&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824923705461&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824993005633&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139833395230364&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835815211508&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835844111589&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139836085512508&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139842151128341&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139843768401936&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869720529462&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869891830365&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889113431619&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889295732144&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905202427693&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905243827825&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905295427946&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905351928096&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905405728262&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905458328378&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905653828999&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905868529690&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140015787404650&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140075368411126&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140724451518351&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141287864628122&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","tags":["Mailing List","Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1","tags":["Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0376.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0377.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0378.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0396.html","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/109","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/173","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/190","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/90","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/91","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57347","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57483","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57721","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57836","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57966","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57968","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59139","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59243","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140605","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670161","tags":["Broken Link"]},{"url":"http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB35882","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2896","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/32745","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/32764","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-1","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/","tags":["Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","tags":["Release Notes"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/720951","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140407.txt","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["Broken Link","Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66690","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030026","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030074","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030077","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030078","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030079","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030080","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030081","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030082","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2165-1","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-098A","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["Broken Link"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","tags":["Broken Link"]},{"url":"https://blog.torproject.org/blog/openssl-bug-cve-2014-0160","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084875","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf","tags":["Third Party Advisory"]},{"url":"https://code.google.com/p/mod-spdy/issues/detail?id=85","tags":["Issue Tracking"]},{"url":"https://filezilla-project.org/versions.php?type=server","tags":["Release Notes"]},{"url":"https://gist.github.com/chapmajs/10473815","tags":["Exploit"]},{"url":"https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html","tags":["Exploit","Permissions Required","Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217","tags":["Third Party Advisory"]},{"url":"https://www.cert.fi/en/reports/2014/vulnerability788210.html","tags":["Not Applicable","Third Party Advisory"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","tags":["Third Party Advisory"]},{"url":"https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Remote crafted packets to exposed TLS service","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows remote attackers to obtain sensitive information from process memory via crafted packets","start":130,"end":225}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Reads process memory for sensitive data","mappingType":"primary_impact","evidence":[{"from":"description","quote":"obtain sensitive information from process memory","start":157,"end":205}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-82efe3b52cfe1fe96bb9","title":"Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions","publisher":"security.com","url":"https://www.security.com/threat-intelligence/leafminer-espionage-middle-east","date":null,"mentions":[{"quote":"Symantec also observed attempts by Leafminer to scan for the Heartbleed vulnerability (CVE-2014-0160) from an attacker-controlled IP address.","start":5682,"end":5823}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2014-0217","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0217","exploited":true,"exploitedSince":"2022-05-04","provenance":"source"},"exploits":[{"id":32745,"url":"https://www.exploit-db.com/exploits/32745","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure","type":"remote","platform":"multiple","date":"2014-04-08","verified":true,"provenance":"source"},{"id":32764,"url":"https://www.exploit-db.com/exploits/32764","title":"OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)","type":"remote","platform":"multiple","date":"2014-04-09","verified":true,"provenance":"source"},{"id":32791,"url":"https://www.exploit-db.com/exploits/32791","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)","type":"remote","platform":"multiple","date":"2014-04-10","verified":true,"provenance":"source"},{"id":32998,"url":"https://www.exploit-db.com/exploits/32998","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)","type":"remote","platform":"multiple","date":"2014-04-24","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":4,"earliest":"2014-04-08"},"pocGithub":{"count":63,"skipped":11,"earliest":"2014-04-07","earliestUrl":"https://github.com/FiloSottile/Heartbleed","repos":[{"name":"FiloSottile/Heartbleed","url":"https://github.com/FiloSottile/Heartbleed","stars":2369,"created":"2014-04-07"},{"name":"musalbas/heartbleed-masstest","url":"https://github.com/musalbas/heartbleed-masstest","stars":571,"created":"2014-04-08"},{"name":"titanous/heartbleeder","url":"https://github.com/titanous/heartbleeder","stars":452,"created":"2014-04-08"},{"name":"Lekensteyn/pacemaker","url":"https://github.com/Lekensteyn/pacemaker","stars":331,"created":"2014-04-08"},{"name":"sensepost/heartbleed-poc","url":"https://github.com/sensepost/heartbleed-poc","stars":171,"created":"2014-04-09"}]},"metasploit":[{"name":"OpenSSL Heartbeat (Heartbleed) Information Leak","module":"auxiliary/scanner/ssl/openssl_heartbleed","type":"auxiliary","disclosureDate":"2014-04-07","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_heartbleed.rb"},{"name":"OpenSSL Heartbeat (Heartbleed) Client Memory Exposure","module":"auxiliary/server/openssl_heartbeat_client_memory","type":"auxiliary","disclosureDate":"2014-04-07","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_heartbeat_client_memory.rb"}],"first":{"date":"2014-04-07","source":"PoC-in-GitHub","url":"https://github.com/FiloSottile/Heartbleed"},"provenance":"source"},"exploitRefs":["http://www.exploit-db.com/exploits/32745","http://www.exploit-db.com/exploits/32764","https://gist.github.com/chapmajs/10473815","https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html","https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd"],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1005"],"provenance":"ai"}],"timeline":[{"date":"2014-04-07","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0160","provenance":"source"},{"date":"2014-04-07","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2014-04-07, Exploit-DB 2014-04-08","url":"https://github.com/FiloSottile/Heartbleed","provenance":"source"},{"date":"2016-09-29","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://cisa.gov/news-events/alerts/2015/04/29/top-30-targeted-high-risk-vulnerabilities","provenance":"source"},{"date":"2022-05-04","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-05-04","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0217","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":2949},"priority":{"score":72.1,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 3682 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":20.0,"detail":"percentile 1.0000"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"5 NVD references tagged Exploit; 4 Exploit-DB entries; 63 PoC-in-GitHub repos; 2 Metasploit modules"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}