{"id":"CVE-2014-0160","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0160","generatedAt":"2026-10-27T18:47:18.041Z","title":"OpenSSL Information Disclosure Vulnerability","description":"The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","published":"2014-04-07T22:55:04.000Z","lastModified":"2026-06-17T00:02:24.000Z","status":"Analyzed","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-125"],"affected":["openssl/openssl","filezilla-project/filezilla server","siemens/application processing engine firmware","siemens/cp 1543-1 firmware","siemens/simatic s7-1500 firmware","siemens/simatic s7-1500t firmware","siemens/elan-8.2","siemens/wincc open architecture","intellian/v100 firmware","intellian/v60 firmware","mitel/micollab","mitel/mivoice","opensuse/opensuse","canonical/ubuntu linux","fedoraproject/fedora","redhat/gluster storage","redhat/storage","redhat/virtualization","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","debian/debian linux","ricon/s9922l firmware","broadcom/symantec messaging gateway","splunk/splunk"],"epss":{"score":0.99999,"percentile":0.99997,"date":"2026-10-26","history":[]},"kev":{"listed":true,"dateAdded":"2022-05-04","dueDate":"2022-05-25","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-0160"},"exploits":{"count":4,"verified":true,"firstPublished":"2014-04-08","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":32998,"kind":"exploit","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)","url":"https://www.exploit-db.com/exploits/32998","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32998.c","file":"exploits/multiple/remote/32998.c","published":"2014-04-24","added":"2014-04-24","updated":"2016-10-27","author":"Ayman Sagy","type":"remote","platform":"multiple","port":null,"verified":true,"codes":["CVE-2014-0346","CVE-2014-0160","OSVDB-105465"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":32791,"kind":"exploit","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)","url":"https://www.exploit-db.com/exploits/32791","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32791.c","file":"exploits/multiple/remote/32791.c","published":"2014-04-10","added":"2014-04-10","updated":"2016-10-27","author":"prdelka","type":"remote","platform":"multiple","port":443,"verified":true,"codes":["CVE-2014-0346","CVE-2014-0160","OSVDB-105465"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":32764,"kind":"exploit","title":"OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)","url":"https://www.exploit-db.com/exploits/32764","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32764.py","file":"exploits/multiple/remote/32764.py","published":"2014-04-09","added":"2014-04-09","updated":"2016-10-27","author":"Fitzl Csaba","type":"remote","platform":"multiple","port":443,"verified":true,"codes":["CVE-2014-0346","CVE-2014-0160","OSVDB-105465"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":32745,"kind":"exploit","title":"OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure","url":"https://www.exploit-db.com/exploits/32745","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32745.py","file":"exploits/multiple/remote/32745.py","published":"2014-04-08","added":"2014-04-08","updated":"2018-01-22","author":"Jared Stafford","type":"remote","platform":"multiple","port":443,"verified":true,"codes":["CVE-2014-0346","OSVDB-105465","CVE-2014-0160"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 25 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://cogentdatahub.com/ReleaseNotes.html","tags":["Release Notes"],"source":"secalert@redhat.com"},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://heartbleed.com/","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html","tags":["Broken Link","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html","tags":["Broken Link","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139722163017074&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139757726426985&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139757819327350&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139757919027752&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139758572430452&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139765756720506&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139774054614965&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139774703817488&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139808058921905&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139817685517037&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139817727317190&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139817782017443&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139824923705461&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139824993005633&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139833395230364&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139835815211508&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139835844111589&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139836085512508&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139842151128341&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139843768401936&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139869720529462&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139869891830365&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139889113431619&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139889295732144&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905202427693&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905243827825&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905295427946&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905351928096&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905405728262&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905458328378&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905653828999&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139905868529690&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140015787404650&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140075368411126&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140724451518351&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141287864628122&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3","tags":["Permissions Required","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0376.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0377.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0378.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0396.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Apr/109","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Apr/173","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Apr/190","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Apr/90","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0160","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}