CVE-2014-0160

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3", "name": "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openssl.org/news/secadv_20140407.txt", "name": "http://www.openssl.org/news/secadv_20140407.txt", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://heartbleed.com/", "name": "http://heartbleed.com/", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.securitytracker.com/id/1030078", "name": "1030078", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://seclists.org/fulldisclosure/2014/Apr/109", "name": "20140409 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://seclists.org/fulldisclosure/2014/Apr/190", "name": "20140412 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html", "name": "[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released", "tags": ["Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html", "name": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html", "name": "RHSA-2014:0376", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html", "name": "RHSA-2014:0396", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.securitytracker.com/id/1030082", "name": "1030082", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/57347", "name": "57347", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2", "name": "HPSBMU02995", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://www.securitytracker.com/id/1030077", "name": "1030077", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161", "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "http://www.debian.org/security/2014/dsa-2896", "name": "DSA-2896", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html", "name": "RHSA-2014:0377", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.securitytracker.com/id/1030080", "name": "1030080", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html", "name": "FEDORA-2014-4879", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://www.securitytracker.com/id/1030074", "name": "1030074", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://seclists.org/fulldisclosure/2014/Apr/90", "name": "20140408 heartbleed OpenSSL bug CVE-2014-0160", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://www.securitytracker.com/id/1030081", "name": "1030081", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed", "name": "20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products", "tags": ["Third Party Advisory"], "refsource": "CISCO"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html", "name": "RHSA-2014:0378", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://seclists.org/fulldisclosure/2014/Apr/91", "name": "20140408 Re: heartbleed OpenSSL bug CVE-2014-0160", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://secunia.com/advisories/57483", "name": "57483", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.splunk.com/view/SP-CAAAMB3", "name": "http://www.splunk.com/view/SP-CAAAMB3", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html", "name": "FEDORA-2014-4910", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://www.securitytracker.com/id/1030079", "name": "1030079", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html", "name": "openSUSE-SU-2014:0492", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "SUSE"}, {"url": "http://secunia.com/advisories/57721", "name": "57721", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.blackberry.com/btsc/KB35882", "name": "http://www.blackberry.com/btsc/KB35882", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "http://www.securitytracker.com/id/1030026", "name": "1030026", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html", "name": "SUSE-SA:2014:002", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "SUSE"}, {"url": "http://www.securityfocus.com/bid/66690", "name": "66690", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/", "name": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.us-cert.gov/ncas/alerts/TA14-098A", "name": "TA14-098A", "tags": ["Third Party Advisory", "US Government Resource"], "refsource": "CERT"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/", "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/", "name": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160", "name": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/57966", "name": "57966", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1", "name": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://seclists.org/fulldisclosure/2014/Apr/173", "name": "20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/", "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/57968", "name": "57968", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "https://code.google.com/p/mod-spdy/issues/detail?id=85", "name": "https://code.google.com/p/mod-spdy/issues/detail?id=85", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.exploit-db.com/exploits/32745", "name": "32745", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.kb.cert.org/vuls/id/720951", "name": "VU#720951", "tags": ["Third Party Advisory", "US Government Resource"], "refsource": "CERT-VN"}, {"url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html", "name": "https://www.cert.fi/en/reports/2014/vulnerability788210.html", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.exploit-db.com/exploits/32764", "name": "32764", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "refsource": "EXPLOIT-DB"}, {"url": "http://secunia.com/advisories/57836", "name": "57836", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "https://gist.github.com/chapmajs/10473815", "name": "https://gist.github.com/chapmajs/10473815", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/", "name": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://cogentdatahub.com/ReleaseNotes.html", "name": "http://cogentdatahub.com/ReleaseNotes.html", "tags": ["Release Notes", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2", "name": "HPSBMU03009", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2", "name": "HPSBMU03022", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2", "name": "HPSBMU03024", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1", "name": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1", "tags": ["Third Party Advisory", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.kerio.com/support/kerio-control/release-history", "name": "http://www.kerio.com/support/kerio-control/release-history", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3", "name": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://advisories.mageia.org/MGASA-2014-0165.html", "name": "http://advisories.mageia.org/MGASA-2014-0165.html", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken", "name": "HPSBST03000", "tags": ["Broken Link"], "refsource": "HP"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843", "name": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://filezilla-project.org/versions.php?type=server", "name": "https://filezilla-project.org/versions.php?type=server", "tags": ["Release Notes", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841", "name": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217", "name": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2", "name": "HPSBHF03136", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://seclists.org/fulldisclosure/2014/Dec/23", "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html", "name": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html", "tags": ["Not Applicable"], "refsource": "CONFIRM"}, {"url": "http://marc.info/?l=bugtraq&m=142660345230545&w=2", "name": "SSRT101846", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "name": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "tags": ["Not Applicable"], "refsource": "CONFIRM"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062", "name": "MDVSA-2015:062", "tags": ["Third Party Advisory"], "refsource": "MANDRIVA"}, {"url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2", "name": "HPSBMU03017", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2", "name": "HPSBMU02994", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2", "name": "HPSBST03001", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2", "name": "HPSBST03004", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2", "name": "HPSBST03016", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2", "name": "HPSBMU03032", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2", "name": "HPSBGN03011", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2", "name": "HPSBMU03013", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2", "name": "HPSBMU03023", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2", "name": "HPSBMU03029", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2", "name": "HPSBGN03008", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2", "name": "HPSBPI03031", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2", "name": "HPSBHF03021", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2", "name": "HPSBMU03037", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2", "name": "HPSBMU03012", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2", "name": "HPSBMU03020", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2", "name": "HPSBMU03025", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2", "name": "HPSBST03027", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2", "name": "HPSBMU02999", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2", "name": "HPSBMU03040", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2", "name": "HPSBST03015", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2", "name": "HPSBMU02997", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2", "name": "HPSBGN03010", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2", "name": "HPSBMU03028", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2", "name": "HPSBMU03044", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2", "name": "HPSBMU03033", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2", "name": "HPSBPI03014", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2", "name": "HPSBMU02998", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2", "name": "HPSBMU03019", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2", "name": "HPSBMU03030", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2", "name": "HPSBMU03018", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2", "name": "HPSBMU03062", "tags": ["Third Party Advisory"], "refsource": "HP"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "name": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661", "name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf", "name": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf", "tags": ["Not Applicable"], "refsource": "CONFIRM"}, {"url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "name": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/59347", "name": "59347", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/59243", "name": "59243", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/59139", "name": "59139", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html", "name": "FEDORA-2014-9308", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01", "name": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html", "name": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://support.citrix.com/article/CTX140605", "name": "http://support.citrix.com/article/CTX140605", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.ubuntu.com/usn/USN-2165-1", "name": "USN-2165-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html", "name": "openSUSE-SU-2014:0560", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "SUSE"}, {"url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded", "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities", "tags": ["Not Applicable"], "refsource": "BUGTRAQ"}, {"url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008", "name": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E", "name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E", "name": "[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html", "name": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E", "name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf", "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E", "name": "[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-0160", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}}, "publishedDate": "2014-04-07T22:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.0.1g", "versionStartIncluding": "1.0.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "0.9.44"}]}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:siemens:application_processing_engine:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:siemens:elan-8.2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "8.3.3"}, {"cpe23Uri": "cpe:2.3:a:siemens:wincc_open_architecture:3.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:intellian:v100_firmware:1.20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:intellian:v100_firmware:1.21:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:intellian:v100_firmware:1.24:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:intellian:v100:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:intellian:v60_firmware:1.15:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:intellian:v60_firmware:1.25:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:intellian:v60:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mitel:micollab:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:micollab:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:micollab:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:micollab:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:micollab:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:micollab:7.3.0.104:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:mivoice:1.1.2.5:*:*:*:*:lync:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:mivoice:1.1.3.3:*:*:*:*:skype_for_business:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:mivoice:1.2.0.11:*:*:*:*:skype_for_business:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:mivoice:1.3.2.2:*:*:*:*:skype_for_business:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mitel:mivoice:1.4.0.102:*:*:*:*:skype_for_business:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:redhat:gluster_storage:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2020-07-28T17:11Z"}