CVE-2014-0160 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process m...
HighCVSS 7.5
EPSS 100.0%
CISA KEV
added 2022-05-04 · due 2022-05-25
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-04
- Due date (FCEB)
- 2022-05-25
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openssl(Debian:12) | < 1.0.1g-1 | 1.0.1g-1 |
| debian/openssl(Debian:13) | < 1.0.1g-1 | 1.0.1g-1 |
| debian/openssl(Debian:14) | < 1.0.1g-1 | 1.0.1g-1 |
| OpenSSL | >= 1.0.1, < 1.0.1g | 1.0.1g |
| filezilla-project filezilla server | < 0.9.44 | 0.9.44 |
| Siemens application processing engine firmware | = 2.0 | No fix listed |
| Siemens cp 1543-1 firmware | = 1.1 | No fix listed |
| Siemens simatic s7-1500 firmware | = 1.5 | No fix listed |
| Siemens simatic s7-1500t firmware | = 1.5 | No fix listed |
| Siemens elan-8.2 | < 8.3.3 | 8.3.3 |
| Siemens wincc open architecture | = 3.12 | No fix listed |
| intellian v100 firmware | = 1.20 | No fix listed |
| intellian v100 firmware | = 1.21 | No fix listed |
| intellian v100 firmware | = 1.24 | No fix listed |
| intellian v60 firmware | = 1.15 | No fix listed |
| intellian v60 firmware | = 1.25 | No fix listed |
| Mitel micollab | = 6.0 | No fix listed |
| Mitel micollab | = 7.0 | No fix listed |
| Mitel micollab | = 7.1 | No fix listed |
| Mitel micollab | = 7.2 | No fix listed |
| Mitel micollab | = 7.3 | No fix listed |
| Mitel micollab | = 7.3.0.104 | No fix listed |
| Mitel mivoice | = 1.1.2.5 | No fix listed |
| Mitel mivoice | = 1.1.3.3 | No fix listed |
| Mitel mivoice | = 1.2.0.11 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Mitel mivoice | = 1.3.2.2 | No fix listed |
| Mitel mivoice | = 1.4.0.102 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
| fedoraproject fedora | = 19 | No fix listed |
| fedoraproject fedora | = 20 | No fix listed |
| redhat gluster storage | = 2.1 | No fix listed |
| redhat storage | = 2.1 | No fix listed |
| redhat virtualization | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 6.5 | No fix listed |
| redhat enterprise linux server eus | = 6.5 | No fix listed |
| redhat enterprise linux server tus | = 6.5 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| ricon s9922l firmware | = 16.10.3(3794) | No fix listed |
| broadcom symantec messaging gateway | = 10.6.0 | No fix listed |
| broadcom symantec messaging gateway | = 10.6.1 | No fix listed |
| splunk | >= 6.0.0, < 6.0.3 | 6.0.3 |
References
- Debian Security Tracker CVE-2014-0160 vendor-advisory
- bugs.debian.org issue-tracking
- advisories.mageia.org third-party-advisory
- blog.fox-it.com issue-tracking third-party-advisory
- cogentdatahub.com release-notes
- download.schneider-electric.com broken-link
- git.openssl.org broken-link
- heartbleed.com third-party-advisory
- FEDORA-2014-4879 broken-link third-party-advisory vendor-advisory
- FEDORA-2014-4910 broken-link third-party-advisory vendor-advisory
- FEDORA-2014-9308 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0492 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2014:002 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0560 mailing-list third-party-advisory vendor-advisory
- HPSBMU02995 mailing-list third-party-advisory vendor-advisory
- HPSBMU02994 mailing-list third-party-advisory vendor-advisory
- HPSBMU02998 mailing-list third-party-advisory vendor-advisory
- HPSBMU02997 mailing-list third-party-advisory vendor-advisory
- HPSBST03001 mailing-list third-party-advisory vendor-advisory
- HPSBMU02999 mailing-list third-party-advisory vendor-advisory
- HPSBGN03008 mailing-list third-party-advisory vendor-advisory
- HPSBGN03010 mailing-list third-party-advisory vendor-advisory
- HPSBMU03012 mailing-list third-party-advisory vendor-advisory
- HPSBMU03019 mailing-list third-party-advisory vendor-advisory
- HPSBMU03017 mailing-list third-party-advisory vendor-advisory
- HPSBMU03018 mailing-list third-party-advisory vendor-advisory
- HPSBST03015 mailing-list third-party-advisory vendor-advisory
- HPSBMU03013 mailing-list third-party-advisory vendor-advisory
- HPSBGN03011 mailing-list third-party-advisory vendor-advisory
- HPSBHF03021 mailing-list third-party-advisory vendor-advisory
- HPSBPI03014 mailing-list third-party-advisory vendor-advisory
- HPSBMU03020 mailing-list third-party-advisory vendor-advisory
- HPSBST03016 mailing-list third-party-advisory vendor-advisory
- HPSBMU03023 mailing-list third-party-advisory vendor-advisory
- HPSBMU03025 mailing-list third-party-advisory vendor-advisory
- HPSBMU03022 mailing-list third-party-advisory vendor-advisory
- HPSBMU03024 mailing-list third-party-advisory vendor-advisory
- HPSBPI03031 mailing-list third-party-advisory vendor-advisory
- HPSBMU03029 mailing-list third-party-advisory vendor-advisory
- HPSBMU03028 mailing-list third-party-advisory vendor-advisory
- HPSBMU03033 mailing-list third-party-advisory vendor-advisory
- HPSBMU03030 mailing-list third-party-advisory vendor-advisory
- HPSBMU03032 mailing-list third-party-advisory vendor-advisory
- HPSBMU03009 mailing-list third-party-advisory vendor-advisory
- HPSBST03004 mailing-list third-party-advisory vendor-advisory
- HPSBST03027 mailing-list third-party-advisory vendor-advisory
- HPSBMU03040 mailing-list third-party-advisory vendor-advisory
- HPSBMU03044 mailing-list third-party-advisory vendor-advisory
- HPSBMU03037 mailing-list third-party-advisory vendor-advisory
- HPSBMU03062 mailing-list third-party-advisory vendor-advisory
- HPSBHF03136 mailing-list third-party-advisory vendor-advisory
- SSRT101846 mailing-list third-party-advisory vendor-advisory
- public.support.unisys.com third-party-advisory
- public.support.unisys.com permissions-required third-party-advisory
- RHSA-2014:0376 third-party-advisory vendor-advisory
- RHSA-2014:0377 third-party-advisory vendor-advisory
- RHSA-2014:0378 third-party-advisory vendor-advisory
- RHSA-2014:0396 third-party-advisory vendor-advisory
- 20140409 Re: heartbleed OpenSSL bug CVE-2014-0160 mailing-list third-party-advisory
- 20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL mailing-list third-party-advisory
- 20140412 Re: heartbleed OpenSSL bug CVE-2014-0160 mailing-list third-party-advisory
- 20140408 heartbleed OpenSSL bug CVE-2014-0160 mailing-list third-party-advisory
- 20140408 Re: heartbleed OpenSSL bug CVE-2014-0160 mailing-list third-party-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list third-party-advisory
- 57347 broken-link third-party-advisory
- 57483 broken-link third-party-advisory
- 57721 broken-link third-party-advisory
- 57836 broken-link third-party-advisory
- 57966 broken-link third-party-advisory
- 57968 broken-link third-party-advisory
- 59139 broken-link third-party-advisory
- 59243 broken-link third-party-advisory
- 59347 broken-link third-party-advisory
- support.citrix.com third-party-advisory
- 20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products third-party-advisory vendor-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com broken-link
- www.apcmedia.com broken-link third-party-advisory
- www.blackberry.com broken-link
- DSA-2896 mailing-list third-party-advisory vendor-advisory
- 32745 exploit third-party-advisory vdb-entry
- 32764 exploit third-party-advisory vdb-entry
- www.f-secure.com broken-link third-party-advisory
- www.getchef.com release-notes
- www.getchef.com third-party-advisory
- www.getchef.com release-notes
- www.getchef.com release-notes
- www.innominate.com not-applicable
- VU#720951 third-party-advisory us-government-resource
- www.kerio.com broken-link third-party-advisory
- MDVSA-2015:062 broken-link third-party-advisory vendor-advisory
- www.openssl.org broken-link vendor-advisory
- www.oracle.com patch third-party-advisory
- www.oracle.com patch third-party-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities broken-link mailing-list not-applicable third-party-advisory vdb-entry
- 66690 broken-link third-party-advisory vdb-entry
- 1030026 broken-link third-party-advisory vdb-entry
- 1030074 broken-link third-party-advisory vdb-entry