Verified65% confidenceFactExact time
The 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.
3
Sources
65%
Confidence
Long-term
Relevance
8/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据79% similarVerifiedThe 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.75% similarUnverifiedThe Heartbleed vulnerability lay dormant in the OpenSSL codebase for approximately two years, while the GHOST vulnerability (CVE-2015-0235) in glibc lay dormant for approximately 14 years.72% similarUnverifiedOpenSSL Heartbleed 漏洞是由 C 语言手动内存管理失误所致72% similarUnverifiedPantsdown（CVE-2019-6260）漏洞允许通过网络未经认证直接读写BMC物理内存65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/795793API
curl https://kongchang.com/api/v1/knowledge/claims/795793MCP
get_claim(id=795793)