{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2014-0160", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2024-08-06T09:05:39.056Z", "dateReserved": "2013-12-03T00:00:00", "datePublished": "2014-04-07T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-11-15T00:00:00"}, "descriptions": [{"lang": "en", "value": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217"}, {"name": "1030077", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030077"}, {"name": "20140408 heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Apr/90"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/"}, {"name": "DSA-2896", "tags": ["vendor-advisory"], "url": "http://www.debian.org/security/2014/dsa-2896"}, {"name": "HPSBGN03008", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2"}, {"name": "HPSBMU03024", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2"}, {"name": "RHSA-2014:0396", "tags": ["vendor-advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html"}, {"name": "HPSBHF03021", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2"}, {"name": "HPSBHF03136", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2"}, {"name": "VU#720951", "tags": ["third-party-advisory"], "url": "http://www.kb.cert.org/vuls/id/720951"}, {"url": "http://www.splunk.com/view/SP-CAAAMB3"}, {"name": "HPSBMU03033", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2"}, {"url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"}, {"url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf"}, {"name": "HPSBGN03011", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"}, {"name": "openSUSE-SU-2014:0492", "tags": ["vendor-advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html"}, {"name": "SSRT101846", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"name": "20140409 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Apr/109"}, {"name": "HPSBMU03037", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2"}, {"name": "1030080", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030080"}, {"name": "57836", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57836"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843"}, {"name": "HPSBMU03012", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2"}, {"name": "HPSBST03001", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2"}, {"name": "66690", "tags": ["vdb-entry"], "url": "http://www.securityfocus.com/bid/66690"}, {"url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf"}, {"url": "https://filezilla-project.org/versions.php?type=server"}, {"name": "HPSBMU03023", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2"}, {"name": "57483", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57483"}, {"name": "20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products", "tags": ["vendor-advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed"}, {"url": "http://www.kerio.com/support/kerio-control/release-history"}, {"url": "http://advisories.mageia.org/MGASA-2014-0165.html"}, {"url": "http://www.blackberry.com/btsc/KB35882"}, {"name": "HPSBHF03293", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"name": "HPSBMU03044", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2"}, {"name": "HPSBMU03030", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2"}, {"name": "1030081", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030081"}, {"name": "FEDORA-2014-4879", "tags": ["vendor-advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html"}, {"name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["mailing-list"], "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"}, {"name": "FEDORA-2014-4910", "tags": ["vendor-advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875"}, {"name": "FEDORA-2014-9308", "tags": ["vendor-advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841"}, {"name": "HPSBMU03013", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2"}, {"name": "1030079", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030079"}, {"name": "RHSA-2014:0377", "tags": ["vendor-advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html"}, {"name": "HPSBMU02995", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2"}, {"name": "HPSBPI03031", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2"}, {"url": "https://code.google.com/p/mod-spdy/issues/detail?id=85"}, {"name": "HPSBMU02999", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2"}, {"name": "HPSBGN03010", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2"}, {"name": "HPSBMU03029", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"}, {"url": "http://heartbleed.com/"}, {"name": "HPSBMU03018", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2"}, {"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01"}, {"name": "HPSBMU03040", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2"}, {"url": "http://cogentdatahub.com/ReleaseNotes.html"}, {"name": "HPSBMU03025", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2"}, {"name": "HPSBST03016", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2"}, {"name": "HPSBMU03028", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2"}, {"name": "HPSBMU03009", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2"}, {"url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1"}, {"name": "TA14-098A", "tags": ["third-party-advisory"], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A"}, {"name": "57347", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57347"}, {"name": "[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released", "tags": ["mailing-list"], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html"}, {"name": "20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Apr/173"}, {"url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"}, {"url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html"}, {"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html"}, {"url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3"}, {"name": "HPSBST03000", "tags": ["vendor-advisory"], "url": "https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken"}, {"name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Dec/23"}, {"name": "HPSBST03004", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2"}, {"name": "USN-2165-1", "tags": ["vendor-advisory"], "url": "http://www.ubuntu.com/usn/USN-2165-1"}, {"name": "RHSA-2014:0378", "tags": ["vendor-advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html"}, {"name": "HPSBMU02997", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2"}, {"name": "SUSE-SA:2014:002", "tags": ["vendor-advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html"}, {"name": "32764", "tags": ["exploit"], "url": "http://www.exploit-db.com/exploits/32764"}, {"name": "HPSBMU02994", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00"}, {"name": "HPSBMU03022", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2"}, {"name": "HPSBST03027", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2"}, {"name": "HPSBMU03019", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2"}, {"name": "HPSBMU03062", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2"}, {"name": "20140408 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Apr/91"}, {"name": "1030078", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030078"}, {"name": "59243", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/59243"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661"}, {"name": "HPSBMU03020", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2"}, {"name": "HPSBST03015", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2"}, {"name": "RHSA-2014:0376", "tags": ["vendor-advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html"}, {"name": "HPSBPI03014", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2"}, {"name": "MDVSA-2015:062", "tags": ["vendor-advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"}, {"url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html"}, {"name": "57721", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57721"}, {"name": "57968", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57968"}, {"url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/"}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3"}, {"name": "openSUSE-SU-2014:0560", "tags": ["vendor-advisory"], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html"}, {"name": "HPSBMU03032", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2"}, {"name": "1030082", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030082"}, {"name": "HPSBMU02998", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2"}, {"name": "32745", "tags": ["exploit"], "url": "http://www.exploit-db.com/exploits/32745"}, {"name": "20140412 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2014/Apr/190"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"}, {"name": "HPSBMU03017", "tags": ["vendor-advisory"], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2"}, {"url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008"}, {"url": "http://www.openssl.org/news/secadv_20140407.txt"}, {"url": "https://gist.github.com/chapmajs/10473815"}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1"}, {"name": "1030074", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030074"}, {"url": "http://support.citrix.com/article/CTX140605"}, {"name": "59139", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/59139"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"}, {"name": "57966", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/57966"}, {"name": "1030026", "tags": ["vdb-entry"], "url": "http://www.securitytracker.com/id/1030026"}, {"name": "59347", "tags": ["third-party-advisory"], "url": "http://secunia.com/advisories/59347"}, {"name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", "tags": ["mailing-list"], "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"}, {"name": "[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", "tags": ["mailing-list"], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html"}, {"name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/", "tags": ["mailing-list"], "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf"}, {"name": "[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/", "tags": ["mailing-list"], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}], "datePublic": "2014-04-07T00:00:00"}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:05:39.056Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217", "tags": ["x_transferred"]}, {"name": "1030077", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030077"}, {"name": "20140408 heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Apr/90"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/", "tags": ["x_transferred"]}, {"name": "DSA-2896", "tags": ["vendor-advisory", "x_transferred"], "url": "http://www.debian.org/security/2014/dsa-2896"}, {"name": "HPSBGN03008", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2"}, {"name": "HPSBMU03024", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2"}, {"name": "RHSA-2014:0396", "tags": ["vendor-advisory", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html"}, {"name": "HPSBHF03021", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2"}, {"name": "HPSBHF03136", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2"}, {"name": "VU#720951", "tags": ["third-party-advisory", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/720951"}, {"url": "http://www.splunk.com/view/SP-CAAAMB3", "tags": ["x_transferred"]}, {"name": "HPSBMU03033", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2"}, {"url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "tags": ["x_transferred"]}, {"url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "tags": ["x_transferred"]}, {"name": "HPSBGN03011", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161", "tags": ["x_transferred"]}, {"url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html", "tags": ["x_transferred"]}, {"name": "openSUSE-SU-2014:0492", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html"}, {"name": "SSRT101846", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"name": "20140409 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Apr/109"}, {"name": "HPSBMU03037", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2"}, {"name": "1030080", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030080"}, {"name": "57836", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57836"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843", "tags": ["x_transferred"]}, {"name": "HPSBMU03012", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2"}, {"name": "HPSBST03001", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2"}, {"name": "66690", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securityfocus.com/bid/66690"}, {"url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf", "tags": ["x_transferred"]}, {"url": "https://filezilla-project.org/versions.php?type=server", "tags": ["x_transferred"]}, {"name": "HPSBMU03023", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2"}, {"name": "57483", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57483"}, {"name": "20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products", "tags": ["vendor-advisory", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed"}, {"url": "http://www.kerio.com/support/kerio-control/release-history", "tags": ["x_transferred"]}, {"url": "http://advisories.mageia.org/MGASA-2014-0165.html", "tags": ["x_transferred"]}, {"url": "http://www.blackberry.com/btsc/KB35882", "tags": ["x_transferred"]}, {"name": "HPSBHF03293", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"name": "HPSBMU03044", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2"}, {"name": "HPSBMU03030", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2"}, {"name": "1030081", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030081"}, {"name": "FEDORA-2014-4879", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html"}, {"name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["mailing-list", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"}, {"name": "FEDORA-2014-4910", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875", "tags": ["x_transferred"]}, {"name": "FEDORA-2014-9308", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841", "tags": ["x_transferred"]}, {"name": "HPSBMU03013", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2"}, {"name": "1030079", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030079"}, {"name": "RHSA-2014:0377", "tags": ["vendor-advisory", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html"}, {"name": "HPSBMU02995", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2"}, {"name": "HPSBPI03031", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2"}, {"url": "https://code.google.com/p/mod-spdy/issues/detail?id=85", "tags": ["x_transferred"]}, {"name": "HPSBMU02999", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2"}, {"name": "HPSBGN03010", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2"}, {"name": "HPSBMU03029", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/", "tags": ["x_transferred"]}, {"url": "http://heartbleed.com/", "tags": ["x_transferred"]}, {"name": "HPSBMU03018", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2"}, {"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01", "tags": ["x_transferred"]}, {"name": "HPSBMU03040", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2"}, {"url": "http://cogentdatahub.com/ReleaseNotes.html", "tags": ["x_transferred"]}, {"name": "HPSBMU03025", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2"}, {"name": "HPSBST03016", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2"}, {"name": "HPSBMU03028", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2"}, {"name": "HPSBMU03009", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2"}, {"url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1", "tags": ["x_transferred"]}, {"name": "TA14-098A", "tags": ["third-party-advisory", "x_transferred"], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A"}, {"name": "57347", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57347"}, {"name": "[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html"}, {"name": "20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Apr/173"}, {"url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160", "tags": ["x_transferred"]}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html", "tags": ["x_transferred"]}, {"url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html", "tags": ["x_transferred"]}, {"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html", "tags": ["x_transferred"]}, {"url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3", "tags": ["x_transferred"]}, {"name": "HPSBST03000", "tags": ["vendor-advisory", "x_transferred"], "url": "https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken"}, {"name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Dec/23"}, {"name": "HPSBST03004", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2"}, {"name": "USN-2165-1", "tags": ["vendor-advisory", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-2165-1"}, {"name": "RHSA-2014:0378", "tags": ["vendor-advisory", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html"}, {"name": "HPSBMU02997", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2"}, {"name": "SUSE-SA:2014:002", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html"}, {"name": "32764", "tags": ["exploit", "x_transferred"], "url": "http://www.exploit-db.com/exploits/32764"}, {"name": "HPSBMU02994", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "tags": ["x_transferred"]}, {"name": "HPSBMU03022", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2"}, {"name": "HPSBST03027", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2"}, {"name": "HPSBMU03019", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2"}, {"name": "HPSBMU03062", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2"}, {"name": "20140408 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Apr/91"}, {"name": "1030078", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030078"}, {"name": "59243", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/59243"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661", "tags": ["x_transferred"]}, {"name": "HPSBMU03020", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2"}, {"name": "HPSBST03015", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2"}, {"name": "RHSA-2014:0376", "tags": ["vendor-advisory", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html"}, {"name": "HPSBPI03014", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2"}, {"name": "MDVSA-2015:062", "tags": ["vendor-advisory", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"}, {"url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html", "tags": ["x_transferred"]}, {"name": "57721", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57721"}, {"name": "57968", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57968"}, {"url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/", "tags": ["x_transferred"]}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3", "tags": ["x_transferred"]}, {"name": "openSUSE-SU-2014:0560", "tags": ["vendor-advisory", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html"}, {"name": "HPSBMU03032", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2"}, {"name": "1030082", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030082"}, {"name": "HPSBMU02998", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2"}, {"name": "32745", "tags": ["exploit", "x_transferred"], "url": "http://www.exploit-db.com/exploits/32745"}, {"name": "20140412 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2014/Apr/190"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/", "tags": ["x_transferred"]}, {"name": "HPSBMU03017", "tags": ["vendor-advisory", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2"}, {"url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008", "tags": ["x_transferred"]}, {"url": "http://www.openssl.org/news/secadv_20140407.txt", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/chapmajs/10473815", "tags": ["x_transferred"]}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1", "tags": ["x_transferred"]}, {"name": "1030074", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030074"}, {"url": "http://support.citrix.com/article/CTX140605", "tags": ["x_transferred"]}, {"name": "59139", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/59139"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/", "tags": ["x_transferred"]}, {"name": "57966", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/57966"}, {"name": "1030026", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securitytracker.com/id/1030026"}, {"name": "59347", "tags": ["third-party-advisory", "x_transferred"], "url": "http://secunia.com/advisories/59347"}, {"name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"}, {"name": "[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html", "tags": ["x_transferred"]}, {"name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf", "tags": ["x_transferred"]}, {"name": "[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"}, {"url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd", "tags": ["x_transferred"]}]}]}}

{}

{"cisaActionDue": "2022-05-25", "cisaExploitAdd": "2022-05-04", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "OpenSSL Information Disclosure Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "matchCriteriaId": "9EE79AC6-5484-4A53-8333-373DAD1B5649", "versionEndExcluding": "1.0.1g", "versionStartIncluding": "1.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F09BC00-9D25-4C39-B705-A5A29F630517", "versionEndExcluding": "0.9.44", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "119DBCCC-439E-4148-9E11-CE8038066811", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:application_processing_engine:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE6A8466-8A69-491B-8DAB-877A6C2F6660", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B60287DD-E302-4F8C-833F-E8BE94BDB8D5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "F703FF33-882F-4CB5-9CA0-8FAE670B2AEF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:*:*:*:*:*:*:*", "matchCriteriaId": "92646048-3383-4F12-ABCA-8346D9837C2C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "30DDEA9B-E1BF-4572-8E12-D13C54603E77", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:*:*:*:*:*:*:*", "matchCriteriaId": "80CEA1F3-B820-4D36-B879-7D55F3B95002", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:*", "matchCriteriaId": "741B2C38-174C-49DF-98D8-F7D6F49D1CE5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:elan-8.2:*:*:*:*:*:*:*:*", "matchCriteriaId": "B77B3ED9-1841-449E-B3B2-F53E73254314", "versionEndExcluding": "8.3.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:wincc_open_architecture:3.12:*:*:*:*:*:*:*", "matchCriteriaId": "B42FE7D9-673C-4FF3-924B-FC21DF06F769", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intellian:v100_firmware:1.20:*:*:*:*:*:*:*", "matchCriteriaId": "A3F2BCF2-2D0C-44AB-AE21-FBC7F04D099A", "vulnerable": true}, {"criteria": "cpe:2.3:o:intellian:v100_firmware:1.21:*:*:*:*:*:*:*", "matchCriteriaId": "B46DDC44-A1B4-4DF8-8AD5-FD235F1C2D54", "vulnerable": true}, {"criteria": "cpe:2.3:o:intellian:v100_firmware:1.24:*:*:*:*:*:*:*", "matchCriteriaId": "82BF6806-3E91-4B22-B53D-13F4CD19F757", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intellian:v100:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF9C2817-7F10-4369-A106-68DF9369B454", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intellian:v60_firmware:1.15:*:*:*:*:*:*:*", "matchCriteriaId": "9079EBFD-B901-4077-AD4B-A8B034BDDEA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:intellian:v60_firmware:1.25:*:*:*:*:*:*:*", "matchCriteriaId": "CFC20C7E-E264-4892-AA43-E289207935EE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intellian:v60:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD513662-1089-4BF8-A0F8-9BE5CBF937BE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mitel:micollab:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "03433A5D-632E-47A5-871A-5859C80CB038", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:micollab:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "2B28F2FB-F263-4B2E-A4C7-951A474FD7F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:micollab:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "DC89913A-F419-43E8-B846-D7AA769EA898", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:micollab:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "9C5C14AB-2C97-406E-98B5-0BDC8B0AFEA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:micollab:7.3:*:*:*:*:*:*:*", "matchCriteriaId": "C08973EF-E86A-46D7-9CF6-4374F2789ED1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:micollab:7.3.0.104:*:*:*:*:*:*:*", "matchCriteriaId": "F2317158-3EE7-4894-ADC0-109E0D94DA0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:mivoice:1.1.2.5:*:*:*:*:lync:*:*", "matchCriteriaId": "501B4ED7-0A26-430A-91A2-29099D3CF493", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:mivoice:1.1.3.3:*:*:*:*:skype_for_business:*:*", "matchCriteriaId": "A93F15B3-1341-446F-85D0-E1842EA1F42C", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:mivoice:1.2.0.11:*:*:*:*:skype_for_business:*:*", "matchCriteriaId": "37A5858D-8DE8-4865-A803-7D8A9D4EA306", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:mivoice:1.3.2.2:*:*:*:*:skype_for_business:*:*", "matchCriteriaId": "32B33A4D-1E37-4EAA-AE25-7DA399D50046", "vulnerable": true}, {"criteria": "cpe:2.3:a:mitel:mivoice:1.4.0.102:*:*:*:*:skype_for_business:*:*", "matchCriteriaId": "EDD5CCE5-CD24-4288-952F-B5814454A890", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*", "matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*", "matchCriteriaId": "7F61F047-129C-41A6-8A27-FFCBB8563E91", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*", "matchCriteriaId": "5991814D-CA77-4C25-90D2-DB542B17E0AD", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*", "matchCriteriaId": "FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:gluster_storage:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5B45F8E4-0E7A-4D55-84C2-5BE5B6335269", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "53C986BD-2D1F-4865-B16D-72FD875E3776", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "37BA55FC-D350-4DEB-9802-40AF59C99E79", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "45010D45-2FF2-4B04-B115-6B6FE606D598", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "835AE071-CEAE-49E5-8F0C-E5F50FB85EFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ricon:s9922l_firmware:16.10.3\\(3794\\):*:*:*:*:*:*:*", "matchCriteriaId": "9ED94033-99C2-419B-BBFA-247B4BB3ED4D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ricon:s9922l:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BB07C7E6-1DFD-4B39-BA17-FB2912CB92D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "1745640A-621C-458B-92C6-C24BA06D79E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "D4DEF17D-93AD-4E79-96ED-E7C44332BD52", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "F660A53D-39E7-422A-9E77-3D69A91F2E07", "versionEndExcluding": "6.0.3", "versionStartIncluding": "6.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug."}, {"lang": "es", "value": "Las implementaciones de (1) TLS y (2) DTLS en OpenSSL 1.0.1 en versiones anteriores a 1.0.1g no manejan adecuadamente paquetes Heartbeat Extension, lo que permite a atacantes remotos obtener informaci\u00f3n sensible desde la memoria de proceso a trav\u00e9s de paquetes manipulados que desencadenan una sobrelectura del buffer, seg\u00fan lo demostrado mediante la lectura de claves privadas, relacionado con d1_both.c y t1_lib.c, tambi\u00e9n conocido como bug Heartbleed."}], "evaluatorImpact": "CVSS V2 scoring evaluates the impact of the vulnerability on the host where the vulnerability is located. When evaluating the impact of this vulnerability to your organization, take into account the nature of the data that is being protected and act according to your organization\u2019s risk acceptance. While CVE-2014-0160 does not allow unrestricted access to memory on the targeted host, a successful exploit does leak information from memory locations which have the potential to contain particularly sensitive information, e.g., cryptographic keys and passwords. Theft of this information could enable other attacks on the information system, the impact of which would depend on the sensitivity of the data and functions of that system.", "id": "CVE-2014-0160", "lastModified": "2024-11-21T02:01:30.317", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2014-04-07T22:55:03.893", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://advisories.mageia.org/MGASA-2014-0165.html"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "http://cogentdatahub.com/ReleaseNotes.html"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://heartbleed.com/"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1"}, {"source": "[email protected]", "tags": ["Permissions Required", "Third Party Advisory"], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/109"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/173"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/190"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/90"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/91"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Dec/23"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57347"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57483"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57721"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57836"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57966"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57968"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59139"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59243"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59347"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://support.citrix.com/article/CTX140605"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www.blackberry.com/btsc/KB35882"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.debian.org/security/2014/dsa-2896"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/32745"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/32764"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"}, {"source": "[email protected]", "tags": ["Not Applicable"], "url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/720951"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.kerio.com/support/kerio-control/release-history"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"}, {"source": "[email protected]", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.openssl.org/news/secadv_20140407.txt"}, {"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"}, {"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html"}, {"source": "[email protected]", "tags": ["Broken Link", "Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/66690"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030026"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030074"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030077"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030078"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030079"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030080"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030081"}, {"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030082"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.splunk.com/view/SP-CAAAMB3"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2165-1"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "US Government Resource"], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://code.google.com/p/mod-spdy/issues/detail?id=85"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "https://filezilla-project.org/versions.php?type=server"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "https://gist.github.com/chapmajs/10473815"}, {"source": "[email protected]", "tags": ["Broken Link"], "url": "https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken"}, {"source": "[email protected]", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"}, {"source": "[email protected]", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"}, {"source": "[email protected]", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"}, {"source": "[email protected]", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html"}, {"source": "[email protected]", "tags": ["Exploit", "Permissions Required", "Third Party Advisory"], "url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217"}, {"source": "[email protected]", "tags": ["Not Applicable", "Third Party Advisory"], "url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008"}, {"source": "[email protected]", "tags": ["Broken Link", "Exploit", "Third Party Advisory"], "url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://advisories.mageia.org/MGASA-2014-0165.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "http://cogentdatahub.com/ReleaseNotes.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://heartbleed.com/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Third Party Advisory"], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/109"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/173"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/190"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/90"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Apr/91"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2014/Dec/23"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57347"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57483"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57721"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57836"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57966"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/57968"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59243"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/59347"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://support.citrix.com/article/CTX140605"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.blackberry.com/btsc/KB35882"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.debian.org/security/2014/dsa-2896"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/32745"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/32764"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/720951"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.kerio.com/support/kerio-control/release-history"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.openssl.org/news/secadv_20140407.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/66690"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030026"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030074"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030077"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030078"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030079"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030080"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030081"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030082"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.splunk.com/view/SP-CAAAMB3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2165-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://code.google.com/p/mod-spdy/issues/detail?id=85"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://filezilla-project.org/versions.php?type=server"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://gist.github.com/chapmajs/10473815"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Permissions Required", "Third Party Advisory"], "url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable", "Third Party Advisory"], "url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Exploit", "Third Party Advisory"], "url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank OpenSSL project for reporting this issue. Upstream acknowledges Neel Mehta (Google Security) as the original reporter.", "affected_release": [{"advisory": "RHSA-2014:0376", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "openssl-0:1.0.1e-16.el6_5.7", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2014-04-08T00:00:00Z"}, {"advisory": "RHSA-2014:0377", "cpe": "cpe:/a:redhat:storage:2.1:server:el6", "package": "openssl-0:1.0.1e-16.el6_5.7", "product_name": "Red Hat Storage 2.1", "release_date": "2014-04-08T00:00:00Z"}, {"advisory": "RHSA-2014:0378", "cpe": "cpe:/o:redhat:enterprise_linux:6::hypervisor", "package": "rhev-hypervisor6-0:6.5-20140407.0.el6ev", "product_name": "RHEV 3.X Hypervisor and Agents for RHEL-6", "release_date": "2014-04-08T00:00:00Z"}, {"advisory": "RHSA-2014:0396", "cpe": "cpe:/o:redhat:enterprise_linux:6::hypervisor", "package": "rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5", "product_name": "RHEV 3.X Hypervisor and Agents for RHEL-6", "release_date": "2014-04-10T00:00:00Z"}, {"advisory": "RHSA-2014:0416", "cpe": "cpe:/a:redhat:rhev_manager:3", "package": "spice-client-msi-0:3.3-12", "product_name": "RHEV Manager version 3.3", "release_date": "2014-04-17T00:00:00Z"}], "bugzilla": {"description": "openssl: information disclosure in handling of TLS heartbeat extension packets", "id": "1084875", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875"}, "csaw": false, "cvss": {"cvss_base_score": "5.0", "cvss_scoring_vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "status": "verified"}, "cwe": "CWE-130->CWE-119->CWE-201", "details": ["The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.", "An information disclosure flaw was found in the way OpenSSL handled TLS and DTLS Heartbeat Extension packets. A malicious TLS or DTLS client or server could send a specially crafted TLS or DTLS Heartbeat packet to disclose a limited portion of memory per request from a connected client or server. Note that the disclosed portions of memory could potentially include sensitive information such as private keys."], "name": "CVE-2014-0160", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "openssl", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "openssl097a", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "openssl098e", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "openssl", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "openssl098e", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5", "fix_state": "Not affected", "package_name": "openssl", "product_name": "Red Hat JBoss Enterprise Application Platform 5"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6", "fix_state": "Not affected", "package_name": "openssl", "product_name": "Red Hat JBoss Enterprise Application Platform 6"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:1", "fix_state": "Not affected", "package_name": "others", "product_name": "Red Hat JBoss Enterprise Web Server 1"}, {"cpe": "cpe:/a:redhat:rhev_manager:", "fix_state": "Affected", "package_name": "rhev-hypervisor", "product_name": "RHEV Manager"}], "public_date": "2014-04-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2014-0160\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-0160\nhttp://www.openssl.org/news/secadv_20140407.txt\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog"], "statement": "This issue did not affect the versions of openssl as shipped with Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6.4 and earlier, Red Hat JBoss Enterprise Application Platform 5 and 6, and Red Hat JBoss Web Server 1 and 2. This issue does affect Red Hat Enterprise Linux 7 Beta, Red Hat Enterprise Linux 6.5, Red Hat Enterprise Virtualization Hypervisor 6.5, and Red Hat Storage 2.1, which provided openssl 1.0.1e. Errata have been released to correct this issue.\nAdditional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/site/announcements/781953", "threat_severity": "Important", "upstream_fix": "openssl 1.0.1g"}