CVE Feed

    Dashboard / CVE / CVE-2014-0160

    CVE-2014-0160

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

    Published:Apr 7, 2014
    Last Modified:Apr 21, 2026
    EPS:Apr 7, 2014
    EPSS Score:0.94464
    CVSS Score:7.5

    CISA Notification

    Description

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 25, 2022
    1570 days ago
    Alert Date
    May 4, 2022
    1591 days ago

    Affected Products

    Vendor
    Broadcom
    Product
    Symantec Messaging Gateway
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Filezilla-project
    Product
    Filezilla Server
    Vendor
    Intellian
    Product
    V100
    Vendor
    Intellian
    Product
    V100 Firmware
    Vendor
    Intellian
    Product
    V60
    Vendor
    Intellian
    Product
    V60 Firmware
    Vendor
    Mitel
    Product
    Micollab
    Vendor
    Mitel
    Product
    Mivoice
    Vendor
    Openssl
    Product
    Openssl
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Gluster Storage
    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Redhat
    Product
    Storage
    Vendor
    Redhat
    Product
    Virtualization
    Vendor
    Ricon
    Product
    S9922l
    Vendor
    Ricon
    Product
    S9922l Firmware
    Vendor
    Siemens
    Product
    Application Processing Engine
    Vendor
    Siemens
    Product
    Application Processing Engine Firmware
    Vendor
    Siemens
    Product
    Cp 1543-1
    Vendor
    Siemens
    Product
    Cp 1543-1 Firmware
    Vendor
    Siemens
    Product
    Elan-8.2
    Vendor
    Siemens
    Product
    Simatic S7-1500
    Vendor
    Siemens
    Product
    Simatic S7-1500 Firmware
    Vendor
    Siemens
    Product
    Simatic S7-1500t
    Vendor
    Siemens
    Product
    Simatic S7-1500t Firmware
    Vendor
    Siemens
    Product
    Wincc Open Architecture
    Vendor
    Splunk
    Product
    Splunk

    Exploits

    http://www.exploit-db.com/exploits/32745http://www.exploit-db.com/exploits/32764https://gist.github.com/chapmajs/10473815https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.htmlhttps://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bdhttp://www.exploit-db.com/exploits/32745http://www.exploit-db.com/exploits/32764https://gist.github.com/chapmajs/10473815https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.htmlhttps://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bdhttps://www.exploit-db.com/exploits/32764https://github.com/0x00-V/heartbleed-pochttps://github.com/0x90/CVE-2014-0160https://github.com/0xAshwesker/CVE-2014-0160https://github.com/0xBlackash/CVE-2014-0160https://github.com/0xinf0/bleeding_onionshttps://github.com/22imer/CVE-2014-0160https://github.com/a0726h77/heartbleed-testhttps://github.com/amerine/coronaryhttps://github.com/anthophilee/A2SV--SSL-VUL-Scanhttps://github.com/ArtemCyberLab/Project-Field-Analysis-and-Memory-Leak-Demonstrationhttps://github.com/artofscripting-zz/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPShttps://github.com/belmind/heartbleedhttps://github.com/caiqiqi/OpenSSL-HeartBleed-CVE-2014-0160-PoChttps://github.com/cbk914/heartbleed-checkerhttps://github.com/cheese-hub/heartbleedhttps://github.com/cved-sources/cve-2014-0160https://github.com/cyphar/heartthreaderhttps://github.com/DisK0nn3cT/MaltegoHeartbleedhttps://github.com/DominikTo/bleedhttps://github.com/einaros/heartbleed-toolshttps://github.com/fb1h2s/CVE-2014-0160https://github.com/FiloSottile/Heartbleedhttps://github.com/froyo75/Heartbleed_Dockerfile_with_Nginxhttps://github.com/GardeniaWhite/fuzzinghttps://github.com/GeeksXtreme/ssl-heartbleed.nsehttps://github.com/GuillermoEscobero/heartbleedhttps://github.com/h3x0v3rl0rd/CVE-2014-0160_Heartbleedhttps://github.com/hmlio/vaas-cve-2014-0160https://github.com/hreese/heartbleed-dtlshttps://github.com/hybridus/heartbleedscannerhttps://github.com/ice-security88/CVE-2014-0160https://github.com/idkqh7/heatbleedinghttps://github.com/IhsSpotlight/HeartBleed-CVE-2014-0160--SCRIPTS-python3https://github.com/indiw0rm/-Heartbleed-https://github.com/indrajeetmp11/Heartbleed-PoC-Exploit-Scripthttps://github.com/ingochris/heartpatch.ushttps://github.com/iSCInc/heartbleedhttps://github.com/isgroup/openmagichttps://github.com/jdauphant/patch-openssl-CVE-2014-0160https://github.com/Lekensteyn/pacemakerhttps://github.com/marstornado/cve-2014-0160-Yunfeng-Jianghttps://github.com/mozilla-services/Heartbleedhttps://github.com/mpgn/heartbleed-PoChttps://github.com/MrE-Fog/CVE-2014-0160-Chrome-Pluginhttps://github.com/musalbas/heartbleed-masstesthttps://github.com/obayesshelton/CVE-2014-0160-Scannerhttps://github.com/OffensivePython/HeartLeakhttps://github.com/pblittle/aws-suturehttps://github.com/pierceoneill/bleeding-hearthttps://github.com/proactiveRISK/heartbleed-extentionhttps://github.com/roganartu/heartbleedchecker-chromehttps://github.com/rouze-d/heartbleedhttps://github.com/Ryo-Soikutsu/Heartbleedhttps://github.com/sammyfung/openssl-heartbleed-fixhttps://github.com/Saymeis/HeartBleedhttps://github.com/sensepost/heartbleed-pochttps://github.com/Shayhha/HeartbleedAttackhttps://github.com/siddolo/knockbleedhttps://github.com/SimoesCTT/CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160https://github.com/takeshixx/ssl-heartbleed.nsehttps://github.com/ThanHuuTuan/Heartexploithttps://github.com/timsonner/cve-2014-0160-heartbleedhttps://github.com/titanous/heartbleederhttps://github.com/tomdevman/heartbleed-bughttps://github.com/tungduongNT/CVE-2014-0160.https://github.com/undacmic/heartbleed-proof-of-concepthttps://github.com/victoriacfigueiredo/heartbleed-labhttps://github.com/vortextube/ssl_scannerhttps://github.com/waqasjamal-zz/HeartBleed-Vulnerability-Checkerhttps://github.com/WildfootW/CVE-2014-0160_OpenSSL_1.0.1f_Heartbleedhttps://github.com/wwwiretap/bleeding_onionshttps://github.com/xanas/heartbleed.pyhttps://github.com/xlucas/heartbleedhttps://github.com/Xyl2k/CVE-2014-0160-Chrome-Pluginhttps://github.com/yashfren/CVE-2014-0160-HeartBleedhttps://github.com/yryz/heartbleed.jshttps://github.com/zouguangxian/heartbleedhttps://www.exploit-db.com/exploits/32745https://www.exploit-db.com/exploits/32791https://www.exploit-db.com/exploits/32998

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-100 Overflow Buffers
    CAPEC-12 Choosing Message Identifier
    CAPEC-123 Buffer Manipulation
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-217 Exploiting Incorrectly Configured SSL/TLS
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-42 MIME Conversion
    CAPEC-44 Overflow Binary Resource File
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-540 Overread Buffers
    CAPEC-612 WiFi MAC Address Tracking
    CAPEC-613 WiFi SSID Tracking
    CAPEC-618 Cellular Broadcast Message Request
    CAPEC-619 Signal Strength Tracking
    CAPEC-621 Analysis of Packet Timing and Sizes
    CAPEC-622 Electromagnetic Side-Channel Attack
    CAPEC-623 Compromising Emanations Attack
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    References

    http://advisories.mageia.org/MGASA-2014-0165.html
    http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
    http://cogentdatahub.com/ReleaseNotes.html
    http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01
    http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3
    http://heartbleed.com/
    http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html
    http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html
    http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html
    http://marc.info/?l=bugtraq&m=139722163017074&w=2
    http://marc.info/?l=bugtraq&m=139757726426985&w=2
    http://marc.info/?l=bugtraq&m=139757819327350&w=2
    http://marc.info/?l=bugtraq&m=139757919027752&w=2
    http://marc.info/?l=bugtraq&m=139758572430452&w=2
    http://marc.info/?l=bugtraq&m=139765756720506&w=2
    http://marc.info/?l=bugtraq&m=139774054614965&w=2
    http://marc.info/?l=bugtraq&m=139774703817488&w=2
    http://marc.info/?l=bugtraq&m=139808058921905&w=2
    http://marc.info/?l=bugtraq&m=139817685517037&w=2
    http://marc.info/?l=bugtraq&m=139817727317190&w=2
    http://marc.info/?l=bugtraq&m=139817782017443&w=2
    http://marc.info/?l=bugtraq&m=139824923705461&w=2
    http://marc.info/?l=bugtraq&m=139824993005633&w=2
    http://marc.info/?l=bugtraq&m=139833395230364&w=2
    http://marc.info/?l=bugtraq&m=139835815211508&w=2
    http://marc.info/?l=bugtraq&m=139835844111589&w=2
    http://marc.info/?l=bugtraq&m=139836085512508&w=2
    http://marc.info/?l=bugtraq&m=139842151128341&w=2
    http://marc.info/?l=bugtraq&m=139843768401936&w=2
    http://marc.info/?l=bugtraq&m=139869720529462&w=2
    http://marc.info/?l=bugtraq&m=139869891830365&w=2
    http://marc.info/?l=bugtraq&m=139889113431619&w=2
    http://marc.info/?l=bugtraq&m=139889295732144&w=2
    http://marc.info/?l=bugtraq&m=139905202427693&w=2
    http://marc.info/?l=bugtraq&m=139905243827825&w=2
    http://marc.info/?l=bugtraq&m=139905295427946&w=2
    http://marc.info/?l=bugtraq&m=139905351928096&w=2
    http://marc.info/?l=bugtraq&m=139905405728262&w=2
    http://marc.info/?l=bugtraq&m=139905458328378&w=2
    http://marc.info/?l=bugtraq&m=139905653828999&w=2
    http://marc.info/?l=bugtraq&m=139905868529690&w=2
    http://marc.info/?l=bugtraq&m=140015787404650&w=2
    http://marc.info/?l=bugtraq&m=140075368411126&w=2
    http://marc.info/?l=bugtraq&m=140724451518351&w=2
    http://marc.info/?l=bugtraq&m=140752315422991&w=2
    http://marc.info/?l=bugtraq&m=141287864628122&w=2
    http://marc.info/?l=bugtraq&m=142660345230545&w=2
    http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1
    http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3
    http://rhn.redhat.com/errata/RHSA-2014-0376.html
    http://rhn.redhat.com/errata/RHSA-2014-0377.html
    http://rhn.redhat.com/errata/RHSA-2014-0378.html
    http://rhn.redhat.com/errata/RHSA-2014-0396.html
    http://seclists.org/fulldisclosure/2014/Apr/109
    http://seclists.org/fulldisclosure/2014/Apr/173
    http://seclists.org/fulldisclosure/2014/Apr/190
    http://seclists.org/fulldisclosure/2014/Apr/90
    http://seclists.org/fulldisclosure/2014/Apr/91
    http://seclists.org/fulldisclosure/2014/Dec/23
    http://secunia.com/advisories/57347
    http://secunia.com/advisories/57483
    http://secunia.com/advisories/57721
    http://secunia.com/advisories/57836
    http://secunia.com/advisories/57966
    http://secunia.com/advisories/57968
    http://secunia.com/advisories/59139
    http://secunia.com/advisories/59243
    http://secunia.com/advisories/59347
    http://support.citrix.com/article/CTX140605
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
    http://www-01.ibm.com/support/docview.wss?uid=isg400001841
    http://www-01.ibm.com/support/docview.wss?uid=isg400001843
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
    http://www-01.ibm.com/support/docview.wss?uid=swg21670161
    http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
    http://www.blackberry.com/btsc/KB35882
    http://www.debian.org/security/2014/dsa-2896
    http://www.exploit-db.com/exploits/32745
    http://www.exploit-db.com/exploits/32764
    http://www.f-secure.com/en/web/labs_global/fsc-2014-1
    http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
    http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/
    http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
    http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
    http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf
    http://www.kb.cert.org/vuls/id/720951
    http://www.kerio.com/support/kerio-control/release-history
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
    http://www.openssl.org/news/secadv_20140407.txt
    http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
    http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html
    http://www.securityfocus.com/archive/1/534161/100/0/threaded
    http://www.securityfocus.com/bid/66690
    http://www.securitytracker.com/id/1030026
    http://www.securitytracker.com/id/1030074
    http://www.securitytracker.com/id/1030077
    http://www.securitytracker.com/id/1030078
    http://www.securitytracker.com/id/1030079
    http://www.securitytracker.com/id/1030080
    http://www.securitytracker.com/id/1030081
    http://www.securitytracker.com/id/1030082
    http://www.splunk.com/view/SP-CAAAMB3
    http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00
    http://www.ubuntu.com/usn/USN-2165-1
    http://www.us-cert.gov/ncas/alerts/TA14-098A
    http://www.vmware.com/security/advisories/VMSA-2014-0012.html
    http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
    https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
    https://bugzilla.redhat.com/show_bug.cgi?id=1084875
    https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf
    https://code.google.com/p/mod-spdy/issues/detail?id=85
    https://filezilla-project.org/versions.php?type=server
    https://gist.github.com/chapmajs/10473815
    https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
    https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E
    https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html
    https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html
    https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
    https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217
    https://www.cert.fi/en/reports/2014/vulnerability788210.html
    https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008
    https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd
    http://advisories.mageia.org/MGASA-2014-0165.html
    http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
    http://cogentdatahub.com/ReleaseNotes.html
    http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01
    http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3
    http://heartbleed.com/
    http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html
    http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html
    http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html
    http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html
    http://marc.info/?l=bugtraq&m=139722163017074&w=2
    http://marc.info/?l=bugtraq&m=139757726426985&w=2
    http://marc.info/?l=bugtraq&m=139757819327350&w=2
    http://marc.info/?l=bugtraq&m=139757919027752&w=2
    http://marc.info/?l=bugtraq&m=139758572430452&w=2
    http://marc.info/?l=bugtraq&m=139765756720506&w=2
    http://marc.info/?l=bugtraq&m=139774054614965&w=2
    http://marc.info/?l=bugtraq&m=139774703817488&w=2
    http://marc.info/?l=bugtraq&m=139808058921905&w=2
    http://marc.info/?l=bugtraq&m=139817685517037&w=2
    http://marc.info/?l=bugtraq&m=139817727317190&w=2
    http://marc.info/?l=bugtraq&m=139817782017443&w=2
    http://marc.info/?l=bugtraq&m=139824923705461&w=2
    http://marc.info/?l=bugtraq&m=139824993005633&w=2
    http://marc.info/?l=bugtraq&m=139833395230364&w=2
    http://marc.info/?l=bugtraq&m=139835815211508&w=2
    http://marc.info/?l=bugtraq&m=139835844111589&w=2
    http://marc.info/?l=bugtraq&m=139836085512508&w=2
    http://marc.info/?l=bugtraq&m=139842151128341&w=2
    http://marc.info/?l=bugtraq&m=139843768401936&w=2
    http://marc.info/?l=bugtraq&m=139869720529462&w=2
    http://marc.info/?l=bugtraq&m=139869891830365&w=2
    http://marc.info/?l=bugtraq&m=139889113431619&w=2
    http://marc.info/?l=bugtraq&m=139889295732144&w=2
    http://marc.info/?l=bugtraq&m=139905202427693&w=2
    http://marc.info/?l=bugtraq&m=139905243827825&w=2
    http://marc.info/?l=bugtraq&m=139905295427946&w=2
    http://marc.info/?l=bugtraq&m=139905351928096&w=2
    http://marc.info/?l=bugtraq&m=139905405728262&w=2
    http://marc.info/?l=bugtraq&m=139905458328378&w=2
    http://marc.info/?l=bugtraq&m=139905653828999&w=2
    http://marc.info/?l=bugtraq&m=139905868529690&w=2
    http://marc.info/?l=bugtraq&m=140015787404650&w=2
    http://marc.info/?l=bugtraq&m=140075368411126&w=2
    http://marc.info/?l=bugtraq&m=140724451518351&w=2
    http://marc.info/?l=bugtraq&m=140752315422991&w=2
    http://marc.info/?l=bugtraq&m=141287864628122&w=2
    http://marc.info/?l=bugtraq&m=142660345230545&w=2
    http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1
    http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3
    http://rhn.redhat.com/errata/RHSA-2014-0376.html
    http://rhn.redhat.com/errata/RHSA-2014-0377.html
    http://rhn.redhat.com/errata/RHSA-2014-0378.html
    http://rhn.redhat.com/errata/RHSA-2014-0396.html
    http://seclists.org/fulldisclosure/2014/Apr/109
    http://seclists.org/fulldisclosure/2014/Apr/173
    http://seclists.org/fulldisclosure/2014/Apr/190
    http://seclists.org/fulldisclosure/2014/Apr/90
    http://seclists.org/fulldisclosure/2014/Apr/91
    http://seclists.org/fulldisclosure/2014/Dec/23
    http://secunia.com/advisories/57347
    http://secunia.com/advisories/57483
    http://secunia.com/advisories/57721
    http://secunia.com/advisories/57836
    http://secunia.com/advisories/57966
    http://secunia.com/advisories/57968
    http://secunia.com/advisories/59139
    http://secunia.com/advisories/59243
    http://secunia.com/advisories/59347
    http://support.citrix.com/article/CTX140605
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
    http://www-01.ibm.com/support/docview.wss?uid=isg400001841
    http://www-01.ibm.com/support/docview.wss?uid=isg400001843
    http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
    http://www-01.ibm.com/support/docview.wss?uid=swg21670161
    http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
    http://www.blackberry.com/btsc/KB35882
    http://www.debian.org/security/2014/dsa-2896
    http://www.exploit-db.com/exploits/32745
    http://www.exploit-db.com/exploits/32764
    http://www.f-secure.com/en/web/labs_global/fsc-2014-1
    http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
    http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/
    http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
    http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
    http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf
    http://www.kb.cert.org/vuls/id/720951
    http://www.kerio.com/support/kerio-control/release-history
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
    http://www.openssl.org/news/secadv_20140407.txt
    http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
    http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html
    http://www.securityfocus.com/archive/1/534161/100/0/threaded
    http://www.securityfocus.com/bid/66690
    http://www.securitytracker.com/id/1030026
    http://www.securitytracker.com/id/1030074
    http://www.securitytracker.com/id/1030077
    http://www.securitytracker.com/id/1030078
    http://www.securitytracker.com/id/1030079
    http://www.securitytracker.com/id/1030080
    http://www.securitytracker.com/id/1030081
    http://www.securitytracker.com/id/1030082
    http://www.splunk.com/view/SP-CAAAMB3
    http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00
    http://www.ubuntu.com/usn/USN-2165-1
    http://www.us-cert.gov/ncas/alerts/TA14-098A
    http://www.vmware.com/security/advisories/VMSA-2014-0012.html
    http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
    https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
    https://bugzilla.redhat.com/show_bug.cgi?id=1084875
    https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf
    https://code.google.com/p/mod-spdy/issues/detail?id=85
    https://filezilla-project.org/versions.php?type=server
    https://gist.github.com/chapmajs/10473815
    https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
    https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E
    https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html
    https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html
    https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
    https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217
    https://www.cert.fi/en/reports/2014/vulnerability788210.html
    https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008
    https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High