VOOZH about

URL: https://nvd.nist.gov/vuln/detail/CVE-2014-0160

⇱ NVD - CVE-2014-0160

  1. Vulnerabilities

CVE-2014-0160 Detail

Description

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NVD assessment not yet provided.

Evaluator Impact

CVSS V2 scoring evaluates the impact of the vulnerability on the host where the vulnerability is located. When evaluating the impact of this vulnerability to your organization, take into account the nature of the data that is being protected and act according to your organization’s risk acceptance. While CVE-2014-0160 does not allow unrestricted access to memory on the targeted host, a successful exploit does leak information from memory locations which have the potential to contain particularly sensitive information, e.g., cryptographic keys and passwords. Theft of this information could enable other attacks on the information system, the impact of which would depend on the sensitivity of the data and functions of that system.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
http://advisories.mageia.org/MGASA-2014-0165.html CVE, Inc., Red Hat Third Party Advisory 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ CVE, Inc., Red Hat Issue Tracking  Third Party Advisory 
http://cogentdatahub.com/ReleaseNotes.html CVE, Inc., Red Hat Release Notes 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 CVE, Inc., Red Hat Broken Link 
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 CVE, Inc., Red Hat Broken Link 
http://heartbleed.com/ CVE, Inc., Red Hat Third Party Advisory 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139722163017074&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139757726426985&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139757819327350&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139757919027752&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139758572430452&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139765756720506&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139774054614965&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139774703817488&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139808058921905&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139817685517037&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139817727317190&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139817782017443&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139824923705461&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139824993005633&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139833395230364&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139835815211508&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139835844111589&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139836085512508&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139842151128341&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139843768401936&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139869720529462&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139869891830365&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139889113431619&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139889295732144&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905202427693&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905243827825&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905295427946&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905351928096&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905405728262&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905458328378&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905653828999&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=139905868529690&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=140015787404650&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=140075368411126&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=140724451518351&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=140752315422991&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=141287864628122&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://marc.info/?l=bugtraq&m=142660345230545&w=2 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1 CVE, Inc., Red Hat Third Party Advisory 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 CVE, Inc., Red Hat Permissions Required  Third Party Advisory 
http://rhn.redhat.com/errata/RHSA-2014-0376.html CVE, Inc., Red Hat Third Party Advisory 
http://rhn.redhat.com/errata/RHSA-2014-0377.html CVE, Inc., Red Hat Third Party Advisory 
http://rhn.redhat.com/errata/RHSA-2014-0378.html CVE, Inc., Red Hat Third Party Advisory 
http://rhn.redhat.com/errata/RHSA-2014-0396.html CVE, Inc., Red Hat Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Apr/109 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Apr/173 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Apr/190 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Apr/90 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Apr/91 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://seclists.org/fulldisclosure/2014/Dec/23 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://secunia.com/advisories/57347 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/57483 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/57721 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/57836 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/57966 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/57968 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/59139 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/59243 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://secunia.com/advisories/59347 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://support.citrix.com/article/CTX140605 CVE, Inc., Red Hat Third Party Advisory 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed CVE, Inc., Red Hat Third Party Advisory 
http://www-01.ibm.com/support/docview.wss?uid=isg400001841 CVE, Inc., Red Hat Third Party Advisory 
http://www-01.ibm.com/support/docview.wss?uid=isg400001843 CVE, Inc., Red Hat Third Party Advisory 
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661 CVE, Inc., Red Hat Third Party Advisory 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161 CVE, Inc., Red Hat Broken Link 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://www.blackberry.com/btsc/KB35882 CVE, Inc., Red Hat Broken Link 
http://www.debian.org/security/2014/dsa-2896 CVE, Inc., Red Hat Mailing List  Third Party Advisory 
http://www.exploit-db.com/exploits/32745 CVE, Inc., Red Hat Exploit  Third Party Advisory  VDB Entry 
http://www.exploit-db.com/exploits/32764 CVE, Inc., Red Hat Exploit  Third Party Advisory  VDB Entry 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ CVE, Inc., Red Hat Release Notes 
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/ CVE, Inc., Red Hat Third Party Advisory 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ CVE, Inc., Red Hat Release Notes 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ CVE, Inc., Red Hat Release Notes 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf CVE, Inc., Red Hat Not Applicable 
http://www.kb.cert.org/vuls/id/720951 CVE, Inc., Red Hat Third Party Advisory  US Government Resource 
http://www.kerio.com/support/kerio-control/release-history CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 CVE, Inc., Red Hat Broken Link  Third Party Advisory 
http://www.openssl.org/news/secadv_20140407.txt CVE, Inc., Red Hat Broken Link  Vendor Advisory 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html CVE, Inc., Red Hat Patch  Third Party Advisory 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html CVE, Inc., Red Hat Patch  Third Party Advisory 
http://www.securityfocus.com/archive/1/534161/100/0/threaded CVE, Inc., Red Hat Broken Link  Not Applicable  Third Party Advisory  VDB Entry 
http://www.securityfocus.com/bid/66690 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030026 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030074 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030077 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030078 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030079 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030080 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030081 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.securitytracker.com/id/1030082 CVE, Inc., Red Hat Broken Link  Third Party Advisory  VDB Entry 
http://www.splunk.com/view/SP-CAAAMB3 CVE, Inc., Red Hat Third Party Advisory 
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 CVE, Inc., Red Hat Third Party Advisory 
http://www.ubuntu.com/usn/USN-2165-1 CVE, Inc., Red Hat Third Party Advisory 
http://www.us-cert.gov/ncas/alerts/TA14-098A CVE, Inc., Red Hat Third Party Advisory  US Government Resource 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html CVE, Inc., Red Hat Broken Link 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 CVE, Inc., Red Hat Broken Link 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 CVE, Inc., Red Hat Issue Tracking 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875 CVE, Inc., Red Hat Issue Tracking  Third Party Advisory 
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf CVE, Inc., Red Hat Third Party Advisory 
https://code.google.com/p/mod-spdy/issues/detail?id=85 CVE, Inc., Red Hat Issue Tracking 
https://filezilla-project.org/versions.php?type=server CVE, Inc., Red Hat Release Notes 
https://gist.github.com/chapmajs/10473815 CVE, Inc., Red Hat Exploit 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken CVE, Inc., Red Hat Broken Link 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E CVE, Inc., Red Hat Mailing List  Patch  Third Party Advisory 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E CVE, Inc., Red Hat Mailing List  Patch  Third Party Advisory 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E CVE, Inc., Red Hat Mailing List  Patch  Third Party Advisory 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E CVE, Inc., Red Hat Mailing List  Patch  Third Party Advisory 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html CVE, Inc., Red Hat Mailing List  Third Party Advisory 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html CVE, Inc., Red Hat Exploit  Permissions Required  Third Party Advisory 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html CVE, Inc., Red Hat Third Party Advisory 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217 CVE, Inc., Red Hat Third Party Advisory 
https://www.cert.fi/en/reports/2014/vulnerability788210.html CVE, Inc., Red Hat Not Applicable  Third Party Advisory 
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160 CISA-ADP US Government Resource 
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 CVE, Inc., Red Hat Third Party Advisory 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd CVE, Inc., Red Hat Broken Link  Exploit  Third Party Advisory 

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name Date Added Due Date Required Action
OpenSSL Information Disclosure Vulnerability 05/04/2022 05/25/2022 Apply updates per vendor instructions.

Weakness Enumeration

CWE-ID CWE Name Source
CWE-125 Out-of-bounds Read 👁 cwe source acceptance level
NIST   CISA-ADP  

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

38 change records found show changes

CVE Modified by CISA-ADP 6/16/2026 8:02:24 PM

Action Type Old Value New Value
Added SSVC 
{"timestamp":"2025-02-07T13:32:34.600181Z","id":"CVE-2014-0160","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

CVE Modified by Red Hat, Inc. 6/16/2026 8:02:24 PM

Action Type Old Value New Value
Added Affected 
[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

Modified Analysis by NIST 4/21/2026 4:07:16 PM

Action Type Old Value New Value
Added Reference Type 
CISA-ADP: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160 Types: US Government Resource

CVE Modified by CISA-ADP 10/21/2025 9:15:53 PM

Action Type Old Value New Value
Added Reference 
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160

CVE Modified by CISA-ADP 10/21/2025 4:16:09 PM

Action Type Old Value New Value
Removed Reference 
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160

CVE Modified by CISA-ADP 10/21/2025 3:16:15 PM

Action Type Old Value New Value
Added Reference 
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160

Modified Analysis by NIST 4/03/2025 2:02:46 PM

Action Type Old Value New Value

CVE Modified by CISA-ADP 2/07/2025 9:15:35 AM

Action Type Old Value New Value
Added CVSS V3.1 
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Added CWE 
CWE-125

Modified Analysis by NIST 1/06/2025 2:36:39 PM

Action Type Old Value New Value

CVE Modified by CVE 11/20/2024 9:01:30 PM

Action Type Old Value New Value
Added Reference 
http://advisories.mageia.org/MGASA-2014-0165.html
Added Reference 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
Added Reference 
http://cogentdatahub.com/ReleaseNotes.html
Added Reference 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01
Added Reference 
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3
Added Reference 
http://heartbleed.com/
Added Reference 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html
Added Reference 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html
Added Reference 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html
Added Reference 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html
Added Reference 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html
Added Reference 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html
Added Reference 
http://marc.info/?l=bugtraq&m=139722163017074&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139757726426985&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139757819327350&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139757919027752&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139758572430452&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139765756720506&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139774054614965&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139774703817488&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139808058921905&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817685517037&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817727317190&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817782017443&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139824923705461&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139824993005633&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139833395230364&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139835815211508&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139835844111589&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139836085512508&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139842151128341&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139843768401936&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139869720529462&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139869891830365&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139889113431619&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139889295732144&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905202427693&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905243827825&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905295427946&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905351928096&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905405728262&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905458328378&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905653828999&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905868529690&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140015787404650&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140075368411126&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140724451518351&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140752315422991&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=141287864628122&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=142660345230545&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=142660345230545&w=2
Added Reference 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1
Added Reference 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3
Added Reference 
http://rhn.redhat.com/errata/RHSA-2014-0376.html
Added Reference 
http://rhn.redhat.com/errata/RHSA-2014-0377.html
Added Reference 
http://rhn.redhat.com/errata/RHSA-2014-0378.html
Added Reference 
http://rhn.redhat.com/errata/RHSA-2014-0396.html
Added Reference 
http://seclists.org/fulldisclosure/2014/Apr/109
Added Reference 
http://seclists.org/fulldisclosure/2014/Apr/173
Added Reference 
http://seclists.org/fulldisclosure/2014/Apr/190
Added Reference 
http://seclists.org/fulldisclosure/2014/Apr/90
Added Reference 
http://seclists.org/fulldisclosure/2014/Apr/91
Added Reference 
http://seclists.org/fulldisclosure/2014/Dec/23
Added Reference 
http://secunia.com/advisories/57347
Added Reference 
http://secunia.com/advisories/57483
Added Reference 
http://secunia.com/advisories/57721
Added Reference 
http://secunia.com/advisories/57836
Added Reference 
http://secunia.com/advisories/57966
Added Reference 
http://secunia.com/advisories/57968
Added Reference 
http://secunia.com/advisories/59139
Added Reference 
http://secunia.com/advisories/59243
Added Reference 
http://secunia.com/advisories/59347
Added Reference 
http://support.citrix.com/article/CTX140605
Added Reference 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
Added Reference 
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
Added Reference 
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
Added Reference 
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
Added Reference 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161
Added Reference 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
Added Reference 
http://www.blackberry.com/btsc/KB35882
Added Reference 
http://www.debian.org/security/2014/dsa-2896
Added Reference 
http://www.exploit-db.com/exploits/32745
Added Reference 
http://www.exploit-db.com/exploits/32764
Added Reference 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1
Added Reference 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
Added Reference 
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/
Added Reference 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
Added Reference 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
Added Reference 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf
Added Reference 
http://www.kb.cert.org/vuls/id/720951
Added Reference 
http://www.kerio.com/support/kerio-control/release-history
Added Reference 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
Added Reference 
http://www.openssl.org/news/secadv_20140407.txt
Added Reference 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Added Reference 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html
Added Reference 
http://www.securityfocus.com/archive/1/534161/100/0/threaded
Added Reference 
http://www.securityfocus.com/bid/66690
Added Reference 
http://www.securitytracker.com/id/1030026
Added Reference 
http://www.securitytracker.com/id/1030074
Added Reference 
http://www.securitytracker.com/id/1030077
Added Reference 
http://www.securitytracker.com/id/1030078
Added Reference 
http://www.securitytracker.com/id/1030079
Added Reference 
http://www.securitytracker.com/id/1030080
Added Reference 
http://www.securitytracker.com/id/1030081
Added Reference 
http://www.securitytracker.com/id/1030082
Added Reference 
http://www.splunk.com/view/SP-CAAAMB3
Added Reference 
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00
Added Reference 
http://www.ubuntu.com/usn/USN-2165-1
Added Reference 
http://www.us-cert.gov/ncas/alerts/TA14-098A
Added Reference 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
Added Reference 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
Added Reference 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
Added Reference 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875
Added Reference 
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf
Added Reference 
https://code.google.com/p/mod-spdy/issues/detail?id=85
Added Reference 
https://filezilla-project.org/versions.php?type=server
Added Reference 
https://gist.github.com/chapmajs/10473815
Added Reference 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
Added Reference 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
Added Reference 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E
Added Reference 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E
Added Reference 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E
Added Reference 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html
Added Reference 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html
Added Reference 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
Added Reference 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217
Added Reference 
https://www.cert.fi/en/reports/2014/vulnerability788210.html
Added Reference 
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008
Added Reference 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd

Modified Analysis by NIST 7/02/2024 12:52:39 PM

Action Type Old Value New Value
Added CPE Configuration 
OR
 *cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0:*:*:*:*:*:*:*
 *cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 6.0.0 up to (excluding) 6.0.3
Changed Reference Type 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ Third Party Advisory


 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ Issue Tracking, Third Party Advisory
Changed Reference Type 
http://cogentdatahub.com/ReleaseNotes.html Release Notes, Third Party Advisory


 
http://cogentdatahub.com/ReleaseNotes.html Release Notes
Changed Reference Type 
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 No Types Assigned


 
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 Broken Link
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html Third Party Advisory


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html Broken Link, Third Party Advisory
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html Third Party Advisory


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html Broken Link, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139722163017074&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139722163017074&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757726426985&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139757726426985&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757819327350&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139757819327350&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757919027752&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139757919027752&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139758572430452&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139758572430452&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139765756720506&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139765756720506&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139774054614965&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139774054614965&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139774703817488&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139774703817488&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139808058921905&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139808058921905&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817685517037&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139817685517037&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817727317190&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139817727317190&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817782017443&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139817782017443&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139824923705461&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139824923705461&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139824993005633&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139824993005633&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139833395230364&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139833395230364&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139835815211508&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139835815211508&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139835844111589&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139835844111589&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139836085512508&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139836085512508&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139842151128341&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139842151128341&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139843768401936&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139843768401936&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139869720529462&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139869720529462&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139869891830365&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139869891830365&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139889113431619&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139889113431619&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139889295732144&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139889295732144&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905202427693&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905202427693&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905243827825&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905243827825&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905295427946&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905295427946&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905351928096&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905351928096&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905405728262&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905405728262&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905458328378&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905458328378&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905653828999&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905653828999&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905868529690&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=139905868529690&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140015787404650&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=140015787404650&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140075368411126&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=140075368411126&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140724451518351&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=140724451518351&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140752315422991&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=140752315422991&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=141287864628122&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=141287864628122&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=142660345230545&w=2 Third Party Advisory


 
http://marc.info/?l=bugtraq&m=142660345230545&w=2 Mailing List, Third Party Advisory
Changed Reference Type 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 Third Party Advisory


 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 Permissions Required, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57347 Third Party Advisory


 
http://secunia.com/advisories/57347 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57483 Third Party Advisory


 
http://secunia.com/advisories/57483 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57721 Third Party Advisory


 
http://secunia.com/advisories/57721 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57836 Third Party Advisory


 
http://secunia.com/advisories/57836 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57966 Third Party Advisory


 
http://secunia.com/advisories/57966 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57968 Third Party Advisory


 
http://secunia.com/advisories/57968 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59139 Third Party Advisory


 
http://secunia.com/advisories/59139 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59243 Third Party Advisory


 
http://secunia.com/advisories/59243 Broken Link, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59347 Third Party Advisory


 
http://secunia.com/advisories/59347 Broken Link, Third Party Advisory
Changed Reference Type 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf Third Party Advisory


 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf Broken Link, Third Party Advisory
Changed Reference Type 
http://www.debian.org/security/2014/dsa-2896 Third Party Advisory


 
http://www.debian.org/security/2014/dsa-2896 Mailing List, Third Party Advisory
Changed Reference Type 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1 Third Party Advisory


 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1 Broken Link, Third Party Advisory
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ Third Party Advisory


 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ Release Notes
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ Third Party Advisory


 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ Release Notes
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ Third Party Advisory


 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ Release Notes
Changed Reference Type 
http://www.kerio.com/support/kerio-control/release-history Third Party Advisory


 
http://www.kerio.com/support/kerio-control/release-history Broken Link, Third Party Advisory
Changed Reference Type 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 Third Party Advisory


 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 Broken Link, Third Party Advisory
Changed Reference Type 
http://www.openssl.org/news/secadv_20140407.txt Vendor Advisory


 
http://www.openssl.org/news/secadv_20140407.txt Broken Link, Vendor Advisory
Changed Reference Type 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Third Party Advisory


 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Patch, Third Party Advisory
Changed Reference Type 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html Third Party Advisory


 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html Patch, Third Party Advisory
Changed Reference Type 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Not Applicable, Third Party Advisory, VDB Entry


 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Broken Link, Not Applicable, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securityfocus.com/bid/66690 Third Party Advisory, VDB Entry


 
http://www.securityfocus.com/bid/66690 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030026 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030026 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030074 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030074 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030077 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030077 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030078 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030078 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030079 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030079 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030080 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030080 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030081 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030081 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030082 Third Party Advisory, VDB Entry


 
http://www.securitytracker.com/id/1030082 Broken Link, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Not Applicable


 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Broken Link
Changed Reference Type 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Not Applicable


 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Broken Link
Changed Reference Type 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 Third Party Advisory


 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 Issue Tracking
Changed Reference Type 
https://code.google.com/p/mod-spdy/issues/detail?id=85 Third Party Advisory


 
https://code.google.com/p/mod-spdy/issues/detail?id=85 Issue Tracking
Changed Reference Type 
https://filezilla-project.org/versions.php?type=server Release Notes, Third Party Advisory


 
https://filezilla-project.org/versions.php?type=server Release Notes
Changed Reference Type 
https://gist.github.com/chapmajs/10473815 Third Party Advisory


 
https://gist.github.com/chapmajs/10473815 Exploit
Changed Reference Type 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html Third Party Advisory


 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html Mailing List, Third Party Advisory
Changed Reference Type 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html Exploit, Third Party Advisory


 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html Exploit, Permissions Required, Third Party Advisory
Changed Reference Type 
https://www.cert.fi/en/reports/2014/vulnerability788210.html Third Party Advisory


 
https://www.cert.fi/en/reports/2014/vulnerability788210.html Not Applicable, Third Party Advisory
Changed Reference Type 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd Exploit, Third Party Advisory


 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd Broken Link, Exploit, Third Party Advisory

CVE Modified by Red Hat, Inc. 5/13/2024 11:06:32 PM

Action Type Old Value New Value

CVE Modified by Red Hat, Inc. 11/06/2023 9:18:10 PM

Action Type Old Value New Value
Added Reference 
Red Hat, Inc. http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 [No types assigned]
Added Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E [No types assigned]
Added Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E [No types assigned]
Added Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E [No types assigned]
Added Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E [No types assigned]
Removed Reference 
Red Hat, Inc. http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3
Removed Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E
Removed Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E
Removed Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E
Removed Reference 
Red Hat, Inc. https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E

Modified Analysis by NIST 2/10/2023 11:58:22 AM

Action Type Old Value New Value
Added CWE 
NIST CWE-125
Removed CWE 
NIST CWE-119
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:ricon:s9922l_firmware:16.10.3\(3794\):*:*:*:*:*:*:*
 OR
 cpe:2.3:h:ricon:s9922l:1.0:*:*:*:*:*:*:*
Changed Reference Type 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Not Applicable


 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Not Applicable, Third Party Advisory, VDB Entry
Changed Reference Type 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd No Types Assigned


 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd Exploit, Third Party Advisory

CVE Modified by Red Hat, Inc. 11/15/2022 4:15:18 PM

Action Type Old Value New Value
Added Reference 
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd [No Types Assigned]

CPE Deprecation Remap by NIST 10/15/2020 9:29:54 AM

Action Type Old Value New Value
Changed CPE Configuration 
OR
 *cpe:2.3:o:redhat:virtualization:6.0:*:*:*:*:*:*:*


 
OR
 *cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*

Modified Analysis by NIST 7/28/2020 1:11:56 PM

Action Type Old Value New Value
Changed CPE Configuration 
OR
 *cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
 *cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*


 
OR
 *cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions from (including) 1.0.1 up to (excluding) 1.0.1g
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:intellian:v100_firmware:1.20:*:*:*:*:*:*:*
 *cpe:2.3:o:intellian:v100_firmware:1.21:*:*:*:*:*:*:*
 *cpe:2.3:o:intellian:v100_firmware:1.24:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:intellian:v100:-:*:*:*:*:*:*:*
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:intellian:v60_firmware:1.15:*:*:*:*:*:*:*
 *cpe:2.3:o:intellian:v60_firmware:1.25:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:intellian:v60:-:*:*:*:*:*:*:*
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:siemens:application_processing_engine:-:*:*:*:*:*:*:*
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*
Added CPE Configuration 
AND
 OR
 *cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:*:*:*:*:*:*:*
 OR
 cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:* versions up to (excluding) 0.9.44
Added CPE Configuration 
OR
 *cpe:2.3:a:mitel:micollab:6.0:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:micollab:7.0:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:micollab:7.1:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:micollab:7.2:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:micollab:7.3:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:micollab:7.3.0.104:*:*:*:*:*:*:*
 *cpe:2.3:a:mitel:mivoice:1.1.2.5:*:*:*:*:lync:*:*
 *cpe:2.3:a:mitel:mivoice:1.1.3.3:*:*:*:*:skype_for_business:*:*
 *cpe:2.3:a:mitel:mivoice:1.2.0.11:*:*:*:*:skype_for_business:*:*
 *cpe:2.3:a:mitel:mivoice:1.3.2.2:*:*:*:*:skype_for_business:*:*
 *cpe:2.3:a:mitel:mivoice:1.4.0.102:*:*:*:*:skype_for_business:*:*
Added CPE Configuration 
OR
 *cpe:2.3:a:redhat:gluster_storage:2.1:*:*:*:*:*:*:*
 *cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
 *cpe:2.3:o:redhat:virtualization:6.0:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:a:siemens:elan-8.2:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.3
 *cpe:2.3:a:siemens:wincc_open_architecture:3.12:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
 *cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
 *cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
 *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
 *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
 *cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Added CPE Configuration 
OR
 *cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
 *cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Changed Reference Type 
http://cogentdatahub.com/ReleaseNotes.html Third Party Advisory


 
http://cogentdatahub.com/ReleaseNotes.html Release Notes, Third Party Advisory
Changed Reference Type 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 Third Party Advisory


 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 Broken Link
Changed Reference Type 
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3 Vendor Advisory


 
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3 Patch, Vendor Advisory
Changed Reference Type 
http://heartbleed.com/ Technical Description, Third Party Advisory


 
http://heartbleed.com/ Third Party Advisory
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html Third Party Advisory


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html Mailing List, Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html Third Party Advisory


 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html Mailing List, Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html Third Party Advisory


 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html Mailing List, Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html Third Party Advisory


 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html Mailing List, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57347 Vendor Advisory


 
http://secunia.com/advisories/57347 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57483 Vendor Advisory


 
http://secunia.com/advisories/57483 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57721 Vendor Advisory


 
http://secunia.com/advisories/57721 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57836 Vendor Advisory


 
http://secunia.com/advisories/57836 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57966 Vendor Advisory


 
http://secunia.com/advisories/57966 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/57968 Vendor Advisory


 
http://secunia.com/advisories/57968 Third Party Advisory
Changed Reference Type 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161 Third Party Advisory


 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161 Broken Link
Changed Reference Type 
http://www.blackberry.com/btsc/KB35882 Third Party Advisory


 
http://www.blackberry.com/btsc/KB35882 Broken Link
Changed Reference Type 
http://www.exploit-db.com/exploits/32745 Third Party Advisory, VDB Entry


 
http://www.exploit-db.com/exploits/32745 Exploit, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.exploit-db.com/exploits/32764 Third Party Advisory, VDB Entry


 
http://www.exploit-db.com/exploits/32764 Exploit, Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf Third Party Advisory


 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf Not Applicable
Changed Reference Type 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Third Party Advisory, VDB Entry


 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Not Applicable
Changed Reference Type 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Third Party Advisory


 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Not Applicable
Changed Reference Type 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Third Party Advisory


 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Not Applicable
Changed Reference Type 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875 Issue Tracking


 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875 Issue Tracking, Third Party Advisory
Changed Reference Type 
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf No Types Assigned


 
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf Third Party Advisory
Changed Reference Type 
https://filezilla-project.org/versions.php?type=server Third Party Advisory


 
https://filezilla-project.org/versions.php?type=server Release Notes, Third Party Advisory
Changed Reference Type 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken Third Party Advisory


 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken Broken Link
Changed Reference Type 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E Third Party Advisory


 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E Third Party Advisory


 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html No Types Assigned


 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html Exploit, Third Party Advisory

CVE Modified by Red Hat, Inc. 2/13/2020 12:15:23 PM

Action Type Old Value New Value
Added Reference 
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

CVE Modified by Red Hat, Inc. 2/10/2020 10:15:13 AM

Action Type Old Value New Value
Added Reference 
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf [No Types Assigned]

CVE Modified by Red Hat, Inc. 2/03/2020 7:15:19 AM

Action Type Old Value New Value
Added Reference 
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

CVE Modified by Red Hat, Inc. 1/25/2020 2:15:11 PM

Action Type Old Value New Value
Added Reference 
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html [No Types Assigned]

Modified Analysis by NIST 9/27/2019 2:22:02 PM

Action Type Old Value New Value
Added CVSS V3.1 
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Changed Reference Type 
http://advisories.mageia.org/MGASA-2014-0165.html No Types Assigned


 
http://advisories.mageia.org/MGASA-2014-0165.html Third Party Advisory
Changed Reference Type 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ No Types Assigned


 
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ Third Party Advisory
Changed Reference Type 
http://cogentdatahub.com/ReleaseNotes.html No Types Assigned


 
http://cogentdatahub.com/ReleaseNotes.html Third Party Advisory
Changed Reference Type 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 No Types Assigned


 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 Third Party Advisory
Changed Reference Type 
http://heartbleed.com/ No Types Assigned


 
http://heartbleed.com/ Technical Description, Third Party Advisory
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html No Types Assigned


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html Third Party Advisory
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html No Types Assigned


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html Third Party Advisory
Changed Reference Type 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html No Types Assigned


 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html No Types Assigned


 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html No Types Assigned


 
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html Third Party Advisory
Changed Reference Type 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html No Types Assigned


 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139722163017074&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139722163017074&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757726426985&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139757726426985&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757819327350&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139757819327350&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139757919027752&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139757919027752&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139758572430452&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139758572430452&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139765756720506&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139765756720506&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139774054614965&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139774054614965&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139774703817488&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139774703817488&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139808058921905&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139808058921905&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817685517037&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139817685517037&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817727317190&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139817727317190&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139817782017443&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139817782017443&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139824923705461&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139824923705461&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139824993005633&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139824993005633&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139833395230364&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139833395230364&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139835815211508&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139835815211508&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139835844111589&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139835844111589&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139836085512508&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139836085512508&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139842151128341&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139842151128341&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139843768401936&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139843768401936&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139869720529462&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139869720529462&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139869891830365&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139869891830365&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139889113431619&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139889113431619&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139889295732144&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139889295732144&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905202427693&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905202427693&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905243827825&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905243827825&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905295427946&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905295427946&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905351928096&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905351928096&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905405728262&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905405728262&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905458328378&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905458328378&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905653828999&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905653828999&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=139905868529690&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=139905868529690&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140015787404650&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=140015787404650&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140075368411126&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=140075368411126&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140724451518351&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=140724451518351&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=140752315422991&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=140752315422991&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=141287864628122&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=141287864628122&w=2 Third Party Advisory
Changed Reference Type 
http://marc.info/?l=bugtraq&m=142660345230545&w=2 No Types Assigned


 
http://marc.info/?l=bugtraq&m=142660345230545&w=2 Third Party Advisory
Changed Reference Type 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1 No Types Assigned


 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1 Third Party Advisory
Changed Reference Type 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 No Types Assigned


 
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3 Third Party Advisory
Changed Reference Type 
http://rhn.redhat.com/errata/RHSA-2014-0376.html No Types Assigned


 
http://rhn.redhat.com/errata/RHSA-2014-0376.html Third Party Advisory
Changed Reference Type 
http://rhn.redhat.com/errata/RHSA-2014-0377.html No Types Assigned


 
http://rhn.redhat.com/errata/RHSA-2014-0377.html Third Party Advisory
Changed Reference Type 
http://rhn.redhat.com/errata/RHSA-2014-0378.html No Types Assigned


 
http://rhn.redhat.com/errata/RHSA-2014-0378.html Third Party Advisory
Changed Reference Type 
http://rhn.redhat.com/errata/RHSA-2014-0396.html No Types Assigned


 
http://rhn.redhat.com/errata/RHSA-2014-0396.html Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Apr/109 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Apr/109 Mailing List, Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Apr/173 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Apr/173 Mailing List, Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Apr/190 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Apr/190 Mailing List, Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Apr/90 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Apr/90 Mailing List, Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Apr/91 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Apr/91 Mailing List, Third Party Advisory
Changed Reference Type 
http://seclists.org/fulldisclosure/2014/Dec/23 No Types Assigned


 
http://seclists.org/fulldisclosure/2014/Dec/23 Mailing List, Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59139 No Types Assigned


 
http://secunia.com/advisories/59139 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59243 No Types Assigned


 
http://secunia.com/advisories/59243 Third Party Advisory
Changed Reference Type 
http://secunia.com/advisories/59347 No Types Assigned


 
http://secunia.com/advisories/59347 Third Party Advisory
Changed Reference Type 
http://support.citrix.com/article/CTX140605 No Types Assigned


 
http://support.citrix.com/article/CTX140605 Third Party Advisory
Changed Reference Type 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed No Types Assigned


 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed Third Party Advisory
Changed Reference Type 
http://www-01.ibm.com/support/docview.wss?uid=isg400001841 No Types Assigned


 
http://www-01.ibm.com/support/docview.wss?uid=isg400001841 Third Party Advisory
Changed Reference Type 
http://www-01.ibm.com/support/docview.wss?uid=isg400001843 No Types Assigned


 
http://www-01.ibm.com/support/docview.wss?uid=isg400001843 Third Party Advisory
Changed Reference Type 
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661 No Types Assigned


 
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661 Third Party Advisory
Changed Reference Type 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161 No Types Assigned


 
http://www-01.ibm.com/support/docview.wss?uid=swg21670161 Third Party Advisory
Changed Reference Type 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf No Types Assigned


 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf Third Party Advisory
Changed Reference Type 
http://www.blackberry.com/btsc/KB35882 No Types Assigned


 
http://www.blackberry.com/btsc/KB35882 Third Party Advisory
Changed Reference Type 
http://www.debian.org/security/2014/dsa-2896 No Types Assigned


 
http://www.debian.org/security/2014/dsa-2896 Third Party Advisory
Changed Reference Type 
http://www.exploit-db.com/exploits/32745 No Types Assigned


 
http://www.exploit-db.com/exploits/32745 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.exploit-db.com/exploits/32764 No Types Assigned


 
http://www.exploit-db.com/exploits/32764 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1 No Types Assigned


 
http://www.f-secure.com/en/web/labs_global/fsc-2014-1 Third Party Advisory
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ No Types Assigned


 
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/ Third Party Advisory
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/ No Types Assigned


 
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/ Third Party Advisory
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ No Types Assigned


 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/ Third Party Advisory
Changed Reference Type 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ No Types Assigned


 
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/ Third Party Advisory
Changed Reference Type 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf No Types Assigned


 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf Third Party Advisory
Changed Reference Type 
http://www.kb.cert.org/vuls/id/720951 US Government Resource


 
http://www.kb.cert.org/vuls/id/720951 Third Party Advisory, US Government Resource
Changed Reference Type 
http://www.kerio.com/support/kerio-control/release-history No Types Assigned


 
http://www.kerio.com/support/kerio-control/release-history Third Party Advisory
Changed Reference Type 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 No Types Assigned


 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 Third Party Advisory
Changed Reference Type 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html No Types Assigned


 
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Third Party Advisory
Changed Reference Type 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html No Types Assigned


 
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html Third Party Advisory
Changed Reference Type 
http://www.securityfocus.com/archive/1/534161/100/0/threaded No Types Assigned


 
http://www.securityfocus.com/archive/1/534161/100/0/threaded Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securityfocus.com/bid/66690 No Types Assigned


 
http://www.securityfocus.com/bid/66690 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030026 No Types Assigned


 
http://www.securitytracker.com/id/1030026 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030074 No Types Assigned


 
http://www.securitytracker.com/id/1030074 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030077 No Types Assigned


 
http://www.securitytracker.com/id/1030077 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030078 No Types Assigned


 
http://www.securitytracker.com/id/1030078 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030079 No Types Assigned


 
http://www.securitytracker.com/id/1030079 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030080 No Types Assigned


 
http://www.securitytracker.com/id/1030080 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030081 No Types Assigned


 
http://www.securitytracker.com/id/1030081 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.securitytracker.com/id/1030082 No Types Assigned


 
http://www.securitytracker.com/id/1030082 Third Party Advisory, VDB Entry
Changed Reference Type 
http://www.splunk.com/view/SP-CAAAMB3 No Types Assigned


 
http://www.splunk.com/view/SP-CAAAMB3 Third Party Advisory
Changed Reference Type 
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 No Types Assigned


 
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 Third Party Advisory
Changed Reference Type 
http://www.ubuntu.com/usn/USN-2165-1 No Types Assigned


 
http://www.ubuntu.com/usn/USN-2165-1 Third Party Advisory
Changed Reference Type 
http://www.us-cert.gov/ncas/alerts/TA14-098A US Government Resource


 
http://www.us-cert.gov/ncas/alerts/TA14-098A Third Party Advisory, US Government Resource
Changed Reference Type 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html No Types Assigned


 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html Third Party Advisory
Changed Reference Type 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 No Types Assigned


 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Third Party Advisory
Changed Reference Type 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 No Types Assigned


 
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 Third Party Advisory
Changed Reference Type 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875 No Types Assigned


 
https://bugzilla.redhat.com/show_bug.cgi?id=1084875 Issue Tracking
Changed Reference Type 
https://code.google.com/p/mod-spdy/issues/detail?id=85 No Types Assigned


 
https://code.google.com/p/mod-spdy/issues/detail?id=85 Third Party Advisory
Changed Reference Type 
https://filezilla-project.org/versions.php?type=server No Types Assigned


 
https://filezilla-project.org/versions.php?type=server Third Party Advisory
Changed Reference Type 
https://gist.github.com/chapmajs/10473815 No Types Assigned


 
https://gist.github.com/chapmajs/10473815 Third Party Advisory
Changed Reference Type 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken No Types Assigned


 
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E Third Party Advisory
Changed Reference Type 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E No Types Assigned


 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E Third Party Advisory
Changed Reference Type 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html No Types Assigned


 
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html Third Party Advisory
Changed Reference Type 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html No Types Assigned


 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html Third Party Advisory
Changed Reference Type 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217 No Types Assigned


 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217 Third Party Advisory
Changed Reference Type 
https://www.cert.fi/en/reports/2014/vulnerability788210.html No Types Assigned


 
https://www.cert.fi/en/reports/2014/vulnerability788210.html Third Party Advisory
Changed Reference Type 
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 No Types Assigned


 
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 Third Party Advisory

CVE Modified by Red Hat, Inc. 3/25/2019 7:34:05 AM

Action Type Old Value New Value
Added Reference 
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

CVE Modified by Red Hat, Inc. 3/21/2019 11:54:49 AM

Action Type Old Value New Value
Added Reference 
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

CVE Modified by Red Hat, Inc. 10/23/2018 5:29:00 PM

Action Type Old Value New Value
Added Reference 
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 [No Types Assigned]

CVE Modified by Red Hat, Inc. 10/09/2018 3:36:18 PM

Action Type Old Value New Value
Added Reference 
http://www.securityfocus.com/archive/1/534161/100/0/threaded [No Types Assigned]
Removed Reference 
http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded [No Types Assigned]

CVE Modified by Red Hat, Inc. 12/15/2017 9:29:03 PM

Action Type Old Value New Value
Added Reference 
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html [No Types Assigned]
Added Reference 
http://www.ubuntu.com/usn/USN-2165-1 [No Types Assigned]

CVE Modified by Red Hat, Inc. 11/14/2017 9:29:02 PM

Action Type Old Value New Value
Added Reference 
http://support.citrix.com/article/CTX140605 [No Types Assigned]
Added Reference 
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html [No Types Assigned]

CVE Modified by Red Hat, Inc. 1/06/2017 9:59:17 PM

Action Type Old Value New Value
Added Reference 
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 [No Types Assigned]
Added Reference 
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html [No Types Assigned]
Added Reference 
http://secunia.com/advisories/59139 [No Types Assigned]
Added Reference 
http://secunia.com/advisories/59243 [No Types Assigned]
Added Reference 
http://secunia.com/advisories/59347 [No Types Assigned]
Added Reference 
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661 [No Types Assigned]
Added Reference 
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf [No Types Assigned]
Added Reference 
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf [No Types Assigned]

CVE Modified by Red Hat, Inc. 11/30/2016 9:59:07 PM

Action Type Old Value New Value
Added Reference 
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00 [No Types Assigned]

CVE Modified by Red Hat, Inc. 8/22/2016 10:06:46 PM

Action Type Old Value New Value
Added Reference 
http://marc.info/?l=bugtraq&m=139757726426985&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139757819327350&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139757919027752&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139758572430452&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139765756720506&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139774054614965&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139774703817488&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139808058921905&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817685517037&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817727317190&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139817782017443&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139824923705461&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139824993005633&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139833395230364&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139835815211508&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139835844111589&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139836085512508&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139842151128341&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139843768401936&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139869720529462&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139889295732144&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905202427693&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905243827825&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905295427946&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905351928096&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905405728262&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905653828999&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=139905868529690&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140015787404650&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140075368411126&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140724451518351&w=2
Added Reference 
http://marc.info/?l=bugtraq&m=140752315422991&w=2

CVE Translated by NIST 2/17/2016 4:45:08 PM

Action Type Old Value New Value
Added Translation 
Las implementaciones de (1) TLS y (2) DTLS en OpenSSL 1.0.1 en versiones anteriores a 1.0.1g no manejan adecuadamente paquetes Heartbeat Extension, lo que permite a atacantes remotos obtener información sensible desde la memoria de proceso a través de paquetes manipulados que desencadenan una sobrelectura del buffer, según lo demostrado mediante la lectura de claves privadas, relacionado con d1_both.c y t1_lib.c, también conocido como bug Heartbleed.
Removed Translation 
Las implementaciones (1) TLS y (2) DTLS en OpenSSL 1.0.1 anterior a 1.0.1g no manejan debidamente paquetes Heartbeart Extension, lo que permite a atacantes remotos obtener información sensible de la memoria de proceso a través de paquetes manipulados que provocan una sobrelectura de buffer, tal y como fue demostrado mediante la lectura de claves privadas, relacionado con d1_both.c y t1_lib.c, también conocido como el bug Heartbleed

CVE Modified by Red Hat, Inc. 3/31/2015 9:59:12 PM

Action Type Old Value New Value
Added Reference 
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

CVE Modified by Red Hat, Inc. 3/30/2015 9:59:09 PM

Action Type Old Value New Value
Added Reference 
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0

CVE Modified by Red Hat, Inc. 3/23/2015 9:59:57 PM

Action Type Old Value New Value
Added Reference 
http://marc.info/?l=bugtraq&m=142660345230545&w=2

CVE Modified by Red Hat, Inc. 12/11/2014 10:00:34 PM

Action Type Old Value New Value
Added Reference 
http://seclists.org/fulldisclosure/2014/Dec/23
Added Reference 
http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded
Added Reference 
http://www.vmware.com/security/advisories/VMSA-2014-0012.html

CVE Modified by Red Hat, Inc. 11/18/2014 9:59:22 PM

Action Type Old Value New Value
Added Reference 
http://marc.info/?l=bugtraq&m=141287864628122&w=2

Initial CVE Analysis 4/24/2014 7:52:20 AM

Action Type Old Value New Value

Quick Info

CVE Dictionary Entry:
CVE-2014-0160
NVD Published Date:
04/07/2014
NVD Last Modified:
06/16/2026
Source:
Red Hat, Inc.