RaqibCTI
CVE

CVE-2014-0160

P2
OpenSSL Information Disclosure Vulnerability
OpenSSL · OpenSSL
Date added (CISA)
2022-05-04
Remediation due
2022-05-25
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.

Source: NVD ↗ · CISA KEV Catalog ↗