CVE

Id
67569  
CVE No.
CVE-2014-0160  
Status
Candidate  
Description
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651615 67569 CVE-2014-0160 BUGTRAQ:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
651616 67569 CVE-2014-0160 URL:http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded  View
651617 67569 CVE-2014-0160 EXPLOIT-DB:32745  View
651618 67569 CVE-2014-0160 URL:http://www.exploit-db.com/exploits/32745  View
651619 67569 CVE-2014-0160 EXPLOIT-DB:32764  View
651620 67569 CVE-2014-0160 URL:http://www.exploit-db.com/exploits/32764  View
651621 67569 CVE-2014-0160 FULLDISC:20140408 Re: heartbleed OpenSSL bug CVE-2014-0160  View
651622 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Apr/91  View
651623 67569 CVE-2014-0160 FULLDISC:20140408 heartbleed OpenSSL bug CVE-2014-0160  View
651624 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Apr/90  View
651625 67569 CVE-2014-0160 FULLDISC:20140409 Re: heartbleed OpenSSL bug CVE-2014-0160  View
651626 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Apr/109  View
651627 67569 CVE-2014-0160 FULLDISC:20140412 Re: heartbleed OpenSSL bug CVE-2014-0160  View
651628 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Apr/190  View
651629 67569 CVE-2014-0160 FULLDISC:20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL  View
651630 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Apr/173  View
651631 67569 CVE-2014-0160 FULLDISC:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
651632 67569 CVE-2014-0160 URL:http://seclists.org/fulldisclosure/2014/Dec/23  View
651633 67569 CVE-2014-0160 MLIST:[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released  View
651634 67569 CVE-2014-0160 URL:https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html  View
651635 67569 CVE-2014-0160 MISC:http://heartbleed.com/  View
651636 67569 CVE-2014-0160 MISC:http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/  View
651637 67569 CVE-2014-0160 MISC:https://blog.torproject.org/blog/openssl-bug-cve-2014-0160  View
651638 67569 CVE-2014-0160 MISC:https://gist.github.com/chapmajs/10473815  View
651639 67569 CVE-2014-0160 MISC:https://www.cert.fi/en/reports/2014/vulnerability788210.html  View
651640 67569 CVE-2014-0160 CONFIRM:http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3  View
651641 67569 CVE-2014-0160 CONFIRM:http://www.openssl.org/news/secadv_20140407.txt  View
651642 67569 CVE-2014-0160 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1084875  View
651643 67569 CVE-2014-0160 CONFIRM:http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html  View
651644 67569 CVE-2014-0160 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21670161  View
651645 67569 CVE-2014-0160 CONFIRM:http://www.blackberry.com/btsc/KB35882  View
651646 67569 CVE-2014-0160 CONFIRM:http://www.splunk.com/view/SP-CAAAMB3  View
651647 67569 CVE-2014-0160 CONFIRM:https://code.google.com/p/mod-spdy/issues/detail?id=85  View
651648 67569 CVE-2014-0160 CONFIRM:http://www.f-secure.com/en/web/labs_global/fsc-2014-1  View
651649 67569 CVE-2014-0160 CONFIRM:http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/  View
651650 67569 CVE-2014-0160 CONFIRM:http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/  View
651651 67569 CVE-2014-0160 CONFIRM:http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/  View
651652 67569 CVE-2014-0160 CONFIRM:http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/  View
651653 67569 CVE-2014-0160 CONFIRM:http://cogentdatahub.com/ReleaseNotes.html  View
651654 67569 CVE-2014-0160 CONFIRM:http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1  View
651655 67569 CVE-2014-0160 CONFIRM:http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3  View
651656 67569 CVE-2014-0160 CONFIRM:http://www.kerio.com/support/kerio-control/release-history  View
651657 67569 CVE-2014-0160 CONFIRM:http://advisories.mageia.org/MGASA-2014-0165.html  View
651658 67569 CVE-2014-0160 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
651659 67569 CVE-2014-0160 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=isg400001841  View
651660 67569 CVE-2014-0160 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=isg400001843  View
651661 67569 CVE-2014-0160 CONFIRM:https://filezilla-project.org/versions.php?type=server  View
651662 67569 CVE-2014-0160 CONFIRM:https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217  View
651663 67569 CVE-2014-0160 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
651664 67569 CVE-2014-0160 CONFIRM:http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0  View
651665 67569 CVE-2014-0160 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00  View
651666 67569 CVE-2014-0160 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661  View
651667 67569 CVE-2014-0160 CONFIRM:http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01  View
651668 67569 CVE-2014-0160 CONFIRM:http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf  View
651669 67569 CVE-2014-0160 CONFIRM:http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf  View
651670 67569 CVE-2014-0160 CISCO:20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products  View
651671 67569 CVE-2014-0160 URL:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed  View
651672 67569 CVE-2014-0160 DEBIAN:DSA-2896  View
651673 67569 CVE-2014-0160 URL:http://www.debian.org/security/2014/dsa-2896  View
651674 67569 CVE-2014-0160 FEDORA:FEDORA-2014-4879  View
651675 67569 CVE-2014-0160 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html  View
651676 67569 CVE-2014-0160 FEDORA:FEDORA-2014-4910  View
651677 67569 CVE-2014-0160 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html  View
651678 67569 CVE-2014-0160 FEDORA:FEDORA-2014-9308  View
651679 67569 CVE-2014-0160 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html  View
651680 67569 CVE-2014-0160 HP:HPSBMU02995  View
651681 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139722163017074&w=2  View
651682 67569 CVE-2014-0160 HP:HPSBMU03009  View
651683 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905458328378&w=2  View
651684 67569 CVE-2014-0160 HP:HPSBMU03022  View
651685 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139869891830365&w=2  View
651686 67569 CVE-2014-0160 HP:HPSBMU03024  View
651687 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139889113431619&w=2  View
651688 67569 CVE-2014-0160 HP:HPSBST03000  View
651689 67569 CVE-2014-0160 URL:https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken  View
651690 67569 CVE-2014-0160 HP:HPSBHF03136  View
651691 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=141287864628122&w=2  View
651692 67569 CVE-2014-0160 HP:HPSBHF03293  View
651693 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=142660345230545&w=2  View
651694 67569 CVE-2014-0160 HP:SSRT101846  View
651695 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=142660345230545&w=2  View
651696 67569 CVE-2014-0160 HP:HPSBGN03008  View
651697 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139774054614965&w=2  View
651698 67569 CVE-2014-0160 HP:HPSBGN03010  View
651699 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139774703817488&w=2  View
651700 67569 CVE-2014-0160 HP:HPSBGN03011  View
651701 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139833395230364&w=2  View
651702 67569 CVE-2014-0160 HP:HPSBHF03021  View
651703 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139835815211508&w=2  View
651704 67569 CVE-2014-0160 HP:HPSBMU02994  View
651705 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139757726426985&w=2  View
651706 67569 CVE-2014-0160 HP:HPSBMU02997  View
651707 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139757919027752&w=2  View
651708 67569 CVE-2014-0160 HP:HPSBMU02998  View
651709 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139757819327350&w=2  View
651710 67569 CVE-2014-0160 HP:HPSBMU02999  View
651711 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139765756720506&w=2  View
651712 67569 CVE-2014-0160 HP:HPSBMU03012  View
651713 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139808058921905&w=2  View
651714 67569 CVE-2014-0160 HP:HPSBMU03013  View
651715 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139824993005633&w=2  View
651716 67569 CVE-2014-0160 HP:HPSBMU03017  View
651717 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139817727317190&w=2  View
651718 67569 CVE-2014-0160 HP:HPSBMU03018  View
651719 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139817782017443&w=2  View
651720 67569 CVE-2014-0160 HP:HPSBMU03019  View
651721 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139817685517037&w=2  View
651722 67569 CVE-2014-0160 HP:HPSBMU03020  View
651723 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139836085512508&w=2  View
651724 67569 CVE-2014-0160 HP:HPSBMU03023  View
651725 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139843768401936&w=2  View
651726 67569 CVE-2014-0160 HP:HPSBMU03025  View
651727 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139869720529462&w=2  View
651728 67569 CVE-2014-0160 HP:HPSBMU03028  View
651729 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905243827825&w=2  View
651730 67569 CVE-2014-0160 HP:HPSBMU03029  View
651731 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905202427693&w=2  View
651732 67569 CVE-2014-0160 HP:HPSBMU03030  View
651733 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905351928096&w=2  View
651734 67569 CVE-2014-0160 HP:HPSBMU03032  View
651735 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905405728262&w=2  View
651736 67569 CVE-2014-0160 HP:HPSBMU03033  View
651737 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905295427946&w=2  View
651738 67569 CVE-2014-0160 HP:HPSBMU03037  View
651739 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=140724451518351&w=2  View
651740 67569 CVE-2014-0160 HP:HPSBMU03040  View
651741 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=140015787404650&w=2  View
651742 67569 CVE-2014-0160 HP:HPSBMU03044  View
651743 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=140075368411126&w=2  View
651744 67569 CVE-2014-0160 HP:HPSBMU03062  View
651745 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=140752315422991&w=2  View
651746 67569 CVE-2014-0160 HP:HPSBPI03014  View
651747 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139835844111589&w=2  View
651748 67569 CVE-2014-0160 HP:HPSBPI03031  View
651749 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139889295732144&w=2  View
651750 67569 CVE-2014-0160 HP:HPSBST03001  View
651751 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139758572430452&w=2  View
651752 67569 CVE-2014-0160 HP:HPSBST03004  View
651753 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905653828999&w=2  View
651754 67569 CVE-2014-0160 HP:HPSBST03015  View
651755 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139824923705461&w=2  View
651756 67569 CVE-2014-0160 HP:HPSBST03016  View
651757 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139842151128341&w=2  View
651758 67569 CVE-2014-0160 HP:HPSBST03027  View
651759 67569 CVE-2014-0160 URL:http://marc.info/?l=bugtraq&m=139905868529690&w=2  View
651760 67569 CVE-2014-0160 MANDRIVA:MDVSA-2015:062  View
651761 67569 CVE-2014-0160 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:062  View
651762 67569 CVE-2014-0160 REDHAT:RHSA-2014:0376  View
651763 67569 CVE-2014-0160 URL:http://rhn.redhat.com/errata/RHSA-2014-0376.html  View
651764 67569 CVE-2014-0160 REDHAT:RHSA-2014:0377  View
651765 67569 CVE-2014-0160 URL:http://rhn.redhat.com/errata/RHSA-2014-0377.html  View
651766 67569 CVE-2014-0160 REDHAT:RHSA-2014:0378  View
651767 67569 CVE-2014-0160 URL:http://rhn.redhat.com/errata/RHSA-2014-0378.html  View
651768 67569 CVE-2014-0160 REDHAT:RHSA-2014:0396  View
651769 67569 CVE-2014-0160 URL:http://rhn.redhat.com/errata/RHSA-2014-0396.html  View
651770 67569 CVE-2014-0160 SUSE:SUSE-SA:2014:002  View
651771 67569 CVE-2014-0160 URL:http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html  View
651772 67569 CVE-2014-0160 SUSE:openSUSE-SU-2014:0492  View
651773 67569 CVE-2014-0160 URL:http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html  View
651774 67569 CVE-2014-0160 CERT:TA14-098A  View
651775 67569 CVE-2014-0160 URL:http://www.us-cert.gov/ncas/alerts/TA14-098A  View
651776 67569 CVE-2014-0160 CERT-VN:VU#720951  View
651777 67569 CVE-2014-0160 URL:http://www.kb.cert.org/vuls/id/720951  View
651778 67569 CVE-2014-0160 BID:66690  View
651779 67569 CVE-2014-0160 URL:http://www.securityfocus.com/bid/66690  View
651780 67569 CVE-2014-0160 SECTRACK:1030026  View
651781 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030026  View
651782 67569 CVE-2014-0160 SECTRACK:1030074  View
651783 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030074  View
651784 67569 CVE-2014-0160 SECTRACK:1030077  View
651785 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030077  View
651786 67569 CVE-2014-0160 SECTRACK:1030078  View
651787 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030078  View
651788 67569 CVE-2014-0160 SECTRACK:1030079  View
651789 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030079  View
651790 67569 CVE-2014-0160 SECTRACK:1030080  View
651791 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030080  View
651792 67569 CVE-2014-0160 SECTRACK:1030081  View
651793 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030081  View
651794 67569 CVE-2014-0160 SECTRACK:1030082  View
651795 67569 CVE-2014-0160 URL:http://www.securitytracker.com/id/1030082  View
651796 67569 CVE-2014-0160 SECUNIA:57347  View
651797 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57347  View
651798 67569 CVE-2014-0160 SECUNIA:57483  View
651799 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57483  View
651800 67569 CVE-2014-0160 SECUNIA:57721  View
651801 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57721  View
651802 67569 CVE-2014-0160 SECUNIA:57836  View
651803 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57836  View
651804 67569 CVE-2014-0160 SECUNIA:57966  View
651805 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57966  View
651806 67569 CVE-2014-0160 SECUNIA:57968  View
651807 67569 CVE-2014-0160 URL:http://secunia.com/advisories/57968  View
651808 67569 CVE-2014-0160 SECUNIA:59243  View
651809 67569 CVE-2014-0160 URL:http://secunia.com/advisories/59243  View
651810 67569 CVE-2014-0160 SECUNIA:59139  View
651811 67569 CVE-2014-0160 URL:http://secunia.com/advisories/59139  View
651812 67569 CVE-2014-0160 SECUNIA:59347  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15679 JVNDB-2014-004554 Jolokia におけるクロスサイトリクエストフォージェリの脆弱性 Jolokia には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-0168 67569 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004554.html  View