Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-0160 Details

Description

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160	CISA-ADP	US Government Resource
http://advisories.mageia.org/MGASA-2014-0165.html	CVE	Third Party Advisory
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/	CVE	Issue TrackingThird Party Advisory
http://cogentdatahub.com/ReleaseNotes.html	CVE	Release Notes
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01	CVE	Broken Link
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3	CVE	Broken Link
http://heartbleed.com/	CVE	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html	CVE	Broken LinkThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html	CVE	Broken LinkThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139722163017074&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757726426985&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757819327350&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757919027752&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139758572430452&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139765756720506&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139774054614965&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139774703817488&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139808058921905&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817685517037&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817727317190&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817782017443&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139824923705461&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139824993005633&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139833395230364&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139835815211508&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139835844111589&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139836085512508&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139842151128341&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139843768401936&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139869720529462&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139869891830365&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139889113431619&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139889295732144&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905202427693&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905243827825&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905295427946&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905351928096&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905405728262&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905458328378&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905653828999&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905868529690&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140015787404650&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140075368411126&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140724451518351&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140752315422991&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=141287864628122&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=142660345230545&w=2	CVE	Mailing ListThird Party Advisory
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1	CVE	Third Party Advisory
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3	CVE	Permissions RequiredThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0376.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0377.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0378.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0396.html	CVE	Third Party Advisory
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160	CVE	Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1084875	CVE	Issue TrackingThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf	CVE	Third Party Advisory
https://code.google.com/p/mod-spdy/issues/detail?id=85	CVE	Issue Tracking
http://seclists.org/fulldisclosure/2014/Apr/109	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/173	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/190	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/90	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/91	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Dec/23	CVE	Mailing ListThird Party Advisory
http://secunia.com/advisories/57347	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/57483	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/57721	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/57836	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/57966	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/57968	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/59139	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/59243	CVE	Broken LinkThird Party Advisory
http://secunia.com/advisories/59347	CVE	Broken LinkThird Party Advisory
https://filezilla-project.org/versions.php?type=server	CVE	Release Notes
https://gist.github.com/chapmajs/10473815	CVE	Exploit
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken	CVE	Broken Link
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatchThird Party Advisory
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html	CVE	Mailing ListThird Party Advisory
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html	CVE	ExploitPermissions RequiredThird Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html	CVE	Third Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217	CVE	Third Party Advisory
http://support.citrix.com/article/CTX140605	CVE	Third Party Advisory
https://www.cert.fi/en/reports/2014/vulnerability788210.html	CVE	Not ApplicableThird Party Advisory
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	CVE	Third Party Advisory
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd	CVE	Broken LinkExploitThird Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21670161	CVE	Broken Link
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf	CVE	Broken LinkThird Party Advisory
http://www.blackberry.com/btsc/KB35882	CVE	Broken Link
http://www.debian.org/security/2014/dsa-2896	CVE	Mailing ListThird Party Advisory
http://www.exploit-db.com/exploits/32745	CVE	ExploitThird Party AdvisoryVDB Entry
http://www.exploit-db.com/exploits/32764	CVE	ExploitThird Party AdvisoryVDB Entry
http://www.f-secure.com/en/web/labs_global/fsc-2014-1	CVE	Broken LinkThird Party Advisory
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/	CVE	Release Notes
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/	CVE	Third Party Advisory
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/	CVE	Release Notes
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/	CVE	Release Notes
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf	CVE	Not Applicable
http://www.kb.cert.org/vuls/id/720951	CVE	Third Party AdvisoryUS Government Resource
http://www.kerio.com/support/kerio-control/release-history	CVE	Broken LinkThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062	CVE	Broken LinkThird Party Advisory
http://www.openssl.org/news/secadv_20140407.txt	CVE	Broken LinkVendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html	CVE	PatchThird Party Advisory
http://www.securityfocus.com/archive/1/534161/100/0/threaded	CVE	Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/66690	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030026	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030074	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030077	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030078	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030079	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030080	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030081	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030082	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.splunk.com/view/SP-CAAAMB3	CVE	Third Party Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2165-1	CVE	Third Party Advisory
http://www.us-cert.gov/ncas/alerts/TA14-098A	CVE	Third Party AdvisoryUS Government Resource
http://www.vmware.com/security/advisories/VMSA-2014-0012.html	CVE	Broken Link
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	CVE	Broken Link
http://advisories.mageia.org/MGASA-2014-0165.html	[email protected]	Third Party Advisory
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/	[email protected]	Issue TrackingThird Party Advisory
http://cogentdatahub.com/ReleaseNotes.html	[email protected]	Release Notes
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01	[email protected]	Broken Link
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3	[email protected]	Broken Link
http://heartbleed.com/	[email protected]	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html	[email protected]	Broken LinkThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html	[email protected]	Broken LinkThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139722163017074&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757726426985&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757819327350&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139757919027752&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139758572430452&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139765756720506&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139774054614965&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139774703817488&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139808058921905&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817685517037&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817727317190&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139817782017443&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139824923705461&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139824993005633&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139833395230364&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139835815211508&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139835844111589&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139836085512508&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139842151128341&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139843768401936&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139869720529462&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139869891830365&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139889113431619&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139889295732144&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905202427693&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905243827825&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905295427946&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905351928096&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905405728262&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905458328378&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905653828999&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=139905868529690&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140015787404650&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140075368411126&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140724451518351&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=140752315422991&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=141287864628122&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=142660345230545&w=2	[email protected]	Mailing ListThird Party Advisory
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1	[email protected]	Third Party Advisory
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3	[email protected]	Permissions RequiredThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0376.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0377.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0378.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0396.html	[email protected]	Third Party Advisory
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160	[email protected]	Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1084875	[email protected]	Issue TrackingThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf	[email protected]	Third Party Advisory
https://code.google.com/p/mod-spdy/issues/detail?id=85	[email protected]	Issue Tracking
http://seclists.org/fulldisclosure/2014/Apr/109	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/173	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/190	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/90	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Apr/91	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2014/Dec/23	[email protected]	Mailing ListThird Party Advisory
http://secunia.com/advisories/57347	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/57483	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/57721	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/57836	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/57966	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/57968	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/59139	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/59243	[email protected]	Broken LinkThird Party Advisory
http://secunia.com/advisories/59347	[email protected]	Broken LinkThird Party Advisory
https://filezilla-project.org/versions.php?type=server	[email protected]	Release Notes
https://gist.github.com/chapmajs/10473815	[email protected]	Exploit
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken	[email protected]	Broken Link
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatchThird Party Advisory
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatchThird Party Advisory
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html	[email protected]	Mailing ListThird Party Advisory
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html	[email protected]	ExploitPermissions RequiredThird Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html	[email protected]	Third Party Advisory
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217	[email protected]	Third Party Advisory
http://support.citrix.com/article/CTX140605	[email protected]	Third Party Advisory
https://www.cert.fi/en/reports/2014/vulnerability788210.html	[email protected]	Not ApplicableThird Party Advisory
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	[email protected]	Third Party Advisory
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd	[email protected]	Broken LinkExploitThird Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21670161	[email protected]	Broken Link
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf	[email protected]	Broken LinkThird Party Advisory
http://www.blackberry.com/btsc/KB35882	[email protected]	Broken Link
http://www.debian.org/security/2014/dsa-2896	[email protected]	Mailing ListThird Party Advisory
http://www.exploit-db.com/exploits/32745	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://www.exploit-db.com/exploits/32764	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://www.f-secure.com/en/web/labs_global/fsc-2014-1	[email protected]	Broken LinkThird Party Advisory
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/	[email protected]	Release Notes
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/	[email protected]	Third Party Advisory
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/	[email protected]	Release Notes
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/	[email protected]	Release Notes
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf	[email protected]	Not Applicable
http://www.kb.cert.org/vuls/id/720951	[email protected]	Third Party AdvisoryUS Government Resource
http://www.kerio.com/support/kerio-control/release-history	[email protected]	Broken LinkThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062	[email protected]	Broken LinkThird Party Advisory
http://www.openssl.org/news/secadv_20140407.txt	[email protected]	Broken LinkVendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html	[email protected]	PatchThird Party Advisory
http://www.securityfocus.com/archive/1/534161/100/0/threaded	[email protected]	Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/66690	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030026	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030074	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030077	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030078	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030079	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030080	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030081	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1030082	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.splunk.com/view/SP-CAAAMB3	[email protected]	Third Party Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2165-1	[email protected]	Third Party Advisory
http://www.us-cert.gov/ncas/alerts/TA14-098A	[email protected]	Third Party AdvisoryUS Government Resource
http://www.vmware.com/security/advisories/VMSA-2014-0012.html	[email protected]	Broken Link
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	[email protected]	Broken Link

see all 257 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
OpenSSL Information Disclosure Vulnerability	May 4, 2022	May 25, 2022	Apply updates per vendor instructions.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-125	Out-of-bounds Read	[email protected]
CWE-125	Out-of-bounds Read	CISA-ADP

Affected Products

Product	Versions
openssl openssl	>= 1.0.1, < 1.0.1g
CPE cpe:2.3:a:openssl:openssl:::::::: Remediation No remediation found in references.
filezilla-project filezilla server	< 0.9.44
CPE cpe:2.3:a:filezilla-project:filezilla_server:::::::: Remediation No remediation found in references.
siemens application processing engine firmware	2.0
CPE cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:::::::* Remediation No remediation found in references.
siemens application processing engine	All versions
CPE cpe:2.3:h:siemens:application_processing_engine:-:::::::* Remediation No remediation found in references.
siemens cp 1543-1 firmware	1.1
CPE cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:::::::* Remediation No remediation found in references.
siemens cp 1543-1	All versions
CPE cpe:2.3:h:siemens:cp_1543-1:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 firmware	1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:::::::* Remediation No remediation found in references.
siemens simatic s7-1500	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500t firmware	1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:::::::* Remediation No remediation found in references.
siemens simatic s7-1500t	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500t:-:::::::* Remediation No remediation found in references.
siemens elan-8.2	< 8.3.3
CPE cpe:2.3:a:siemens:elan-8.2:::::::: Remediation No remediation found in references.
siemens wincc open architecture	3.12
CPE cpe:2.3:a:siemens:wincc_open_architecture:3.12:::::::* Remediation No remediation found in references.
intellian v100 firmware	1.20 1.21 1.24
CPE cpe:2.3:o:intellian:v100_firmware:1.20:::::::* cpe:2.3:o:intellian:v100_firmware:1.21:::::::* cpe:2.3:o:intellian:v100_firmware:1.24:::::::* Remediation No remediation found in references.
intellian v100	All versions
CPE cpe:2.3:h:intellian:v100:-:::::::* Remediation No remediation found in references.
intellian v60 firmware	1.15 1.25
CPE cpe:2.3:o:intellian:v60_firmware:1.15:::::::* cpe:2.3:o:intellian:v60_firmware:1.25:::::::* Remediation No remediation found in references.
intellian v60	All versions
CPE cpe:2.3:h:intellian:v60:-:::::::* Remediation No remediation found in references.
mitel micollab	6.0 7.0 7.1 7.2 7.3
CPE cpe:2.3:a:mitel:micollab:6.0:::::::* cpe:2.3:a:mitel:micollab:7.0:::::::* cpe:2.3:a:mitel:micollab:7.1:::::::* cpe:2.3:a:mitel:micollab:7.2:::::::* cpe:2.3:a:mitel:micollab:7.3:::::::* cpe:2.3:a:mitel:micollab:7.3.0.104:::::::* Remediation No remediation found in references.
mitel mivoice	1.1.2.5 1.1.3.3 1.2.0.11 1.3.2.2 1.4.0.102
CPE cpe:2.3:a:mitel:mivoice:1.1.2.5:::::lync:: cpe:2.3:a:mitel:mivoice:1.1.3.3:::::skype_for_business:: cpe:2.3:a:mitel:mivoice:1.2.0.11:::::skype_for_business:: cpe:2.3:a:mitel:mivoice:1.3.2.2:::::skype_for_business:: cpe:2.3:a:mitel:mivoice:1.4.0.102:::::skype_for_business:: Remediation No remediation found in references.
opensuse opensuse	12.3 13.1
CPE cpe:2.3:o:opensuse:opensuse:12.3:::::::* cpe:2.3:o:opensuse:opensuse:13.1:::::::* Remediation No remediation found in references.
canonical ubuntu linux	12.04 12.10 13.10
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::* Remediation No remediation found in references.
fedoraproject fedora	19 20
CPE cpe:2.3:o:fedoraproject:fedora:19:::::::* cpe:2.3:o:fedoraproject:fedora:20:::::::* Remediation No remediation found in references.
redhat gluster storage	2.1
CPE cpe:2.3:a:redhat:gluster_storage:2.1:::::::* Remediation No remediation found in references.
redhat storage	2.1
CPE cpe:2.3:a:redhat:storage:2.1:::::::* Remediation No remediation found in references.
redhat virtualization	6.0
CPE cpe:2.3:a:redhat:virtualization:6.0:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	6.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server	6.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server aus	6.5
CPE cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:::::::* Remediation No remediation found in references.
redhat enterprise linux server eus	6.5
CPE cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:::::::* Remediation No remediation found in references.
redhat enterprise linux server tus	6.5
CPE cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	6.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* Remediation No remediation found in references.
debian debian linux	6.0 7.0 8.0
CPE cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::* Remediation No remediation found in references.
ricon s9922l firmware	16.10.3(3794)
CPE cpe:2.3:o:ricon:s9922l_firmware:16.10.3(3794):::::::* Remediation No remediation found in references.
ricon s9922l	1.0
CPE cpe:2.3:h:ricon:s9922l:1.0:::::::* Remediation No remediation found in references.
broadcom symantec messaging gateway	10.6.0 10.6.1
CPE cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0:::::::* cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1:::::::* Remediation No remediation found in references.
splunk splunk	>= 6.0.0, < 6.0.3
CPE cpe:2.3:a:splunk:splunk:::::enterprise:::* Remediation No remediation found in references.

Change History

38 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Apr 21, 2026	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Apr 3, 2025	Modified Analysis	[email protected]
Feb 7, 2025	CVE Modified	CISA-ADP
Jan 6, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Jul 2, 2024	Modified Analysis	[email protected]
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Feb 10, 2023	Modified Analysis	[email protected]
Nov 15, 2022	CVE Modified	[email protected]
Oct 15, 2020	CPE Deprecation Remap	[email protected]
Jul 28, 2020	Modified Analysis	[email protected]
Feb 13, 2020	CVE Modified	[email protected]
Feb 10, 2020	CVE Modified	[email protected]
Feb 3, 2020	CVE Modified	[email protected]
Jan 25, 2020	CVE Modified	[email protected]
Sep 27, 2019	Modified Analysis	[email protected]
Mar 25, 2019	CVE Modified	[email protected]
Mar 21, 2019	CVE Modified	[email protected]
Oct 23, 2018	CVE Modified	[email protected]
Oct 9, 2018	CVE Modified	[email protected]
Dec 16, 2017	CVE Modified	[email protected]
Nov 15, 2017	CVE Modified	[email protected]
Jan 7, 2017	CVE Modified	[email protected]
Dec 1, 2016	CVE Modified	[email protected]
Aug 23, 2016	CVE Modified	[email protected]
Feb 17, 2016	CVE Translated	[email protected]
Apr 1, 2015	CVE Modified	[email protected]
Mar 31, 2015	CVE Modified	[email protected]
Mar 24, 2015	CVE Modified	[email protected]
Dec 12, 2014	CVE Modified	[email protected]
Nov 19, 2014	CVE Modified	[email protected]
Apr 24, 2014	Initial Analysis	[email protected]

CVE-2014-0160 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO