CVE-2014-0160 — OpenSSL Information Disclosure Vulnerability

CISA KEVExploited: confirmedOpenSSL

The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.

Vulnerability details

Affected productsOpenSSL
KEV remediation due2022-05-25