CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-04-07
OpenSSL Heartbeat Extension Buffer Over-read Vulnerability (Heartbleed, CVE-2014-0160)
[Affected Scope] OpenSSL versions 1.0.1 through 1.0.1f supporting TLS/DTLS Heartbeat extension
[Impact] Remote attackers can read up to 64KB of host memory per request, potentially exposing private keys, session tokens, and credentials
[Mitigation] Upgrade OpenSSL to version 1.0.1g or later immediately, revoke compromised SSL/TLS certificates, and reissue new keys