Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-0160


The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.


Published

2014-04-07T22:55:03.893

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-125
  • Type: Secondary
    CWE-125

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openssl openssl < 1.0.1g Yes
Application filezilla-project filezilla_server < 0.9.44 Yes
Operating System siemens application_processing_engine_firmware 2.0 Yes
Hardware siemens application_processing_engine - No
Operating System siemens cp_1543-1_firmware 1.1 Yes
Hardware siemens cp_1543-1 - No
Operating System siemens simatic_s7-1500_firmware 1.5 Yes
Hardware siemens simatic_s7-1500 - No
Operating System siemens simatic_s7-1500t_firmware 1.5 Yes
Hardware siemens simatic_s7-1500t - No
Application siemens elan-8.2 < 8.3.3 Yes
Application siemens wincc_open_architecture 3.12 Yes
Operating System intellian v100_firmware 1.20 Yes
Operating System intellian v100_firmware 1.21 Yes
Operating System intellian v100_firmware 1.24 Yes
Hardware intellian v100 - No
Operating System intellian v60_firmware 1.15 Yes
Operating System intellian v60_firmware 1.25 Yes
Hardware intellian v60 - No
Application mitel micollab 6.0 Yes
Application mitel micollab 7.0 Yes
Application mitel micollab 7.1 Yes
Application mitel micollab 7.2 Yes
Application mitel micollab 7.3 Yes
Application mitel micollab 7.3.0.104 Yes
Application mitel mivoice 1.1.2.5 Yes
Application mitel mivoice 1.1.3.3 Yes
Application mitel mivoice 1.2.0.11 Yes
Application mitel mivoice 1.3.2.2 Yes
Application mitel mivoice 1.4.0.102 Yes
Operating System opensuse opensuse 12.3 Yes
Operating System opensuse opensuse 13.1 Yes
Operating System canonical ubuntu_linux 12.04 Yes
Operating System canonical ubuntu_linux 12.10 Yes
Operating System canonical ubuntu_linux 13.10 Yes
Operating System fedoraproject fedora 19 Yes
Operating System fedoraproject fedora 20 Yes
Application redhat gluster_storage 2.1 Yes
Application redhat storage 2.1 Yes
Application redhat virtualization 6.0 Yes
Operating System redhat enterprise_linux_desktop 6.0 Yes
Operating System redhat enterprise_linux_server 6.0 Yes
Operating System redhat enterprise_linux_server_aus 6.5 Yes
Operating System redhat enterprise_linux_server_eus 6.5 Yes
Operating System redhat enterprise_linux_server_tus 6.5 Yes
Operating System redhat enterprise_linux_workstation 6.0 Yes
Operating System debian debian_linux 6.0 Yes
Operating System debian debian_linux 7.0 Yes
Operating System debian debian_linux 8.0 Yes
Operating System ricon s9922l_firmware 16.10.3\(3794\) Yes
Hardware ricon s9922l 1.0 No
Application broadcom symantec_messaging_gateway 10.6.0 Yes
Application broadcom symantec_messaging_gateway 10.6.1 Yes
Application splunk splunk < 6.0.3 Yes

References