Verified90% confidenceFactTime unknown
The 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.
7
Sources
90%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedThe Heartbleed vulnerability of 2014 revealed that a project relied upon by the global internet, such as OpenSSL, was being maintained by only two part-time maintainers.83% similarUnverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据81% similarUnverifiedHeartbleed漏洞在OpenSSL代码库中潜伏约两年，glibc的GHOST漏洞(CVE-2015-0235)潜伏约14年79% similarUnverifiedThe 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.75% similarUnverifiedThe Heartbleed vulnerability existed in the OpenSSL codebase for more than two years before being discovered, directly leading to the establishment of the Core Infrastructure Initiative (CII, later evolved into OpenSSF).73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/19879API
curl https://kongchang.com/api/v1/knowledge/claims/19879MCP
get_claim(id=19879)