Heartbleed
A critical security vulnerability in OpenSSL (CVE-2014-0160) disclosed in April 2014. It allowed attackers to read sensitive data from the memory of affected servers, impacting a large number of centralized internet services worldwide.
Core Facts
The 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.
The 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.
Timeline (last 90 days)
The 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.
The 2014 Heartbleed vulnerability in OpenSSL exposed the dire funding situation of core open-source maintainers
All Facts (3)
The 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.
90%VerifiedThe 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.
65%UnverifiedThe 2014 Heartbleed vulnerability in OpenSSL exposed the dire funding situation of core open-source maintainers
85%