CVE-2014-0160 OpenSSL OpenSSL
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
- CVSS
- not scored
On CISA’s exploited list
OpenSSL Information Disclosure Vulnerability
- Added
- 2022-05-04
- Federal patch deadline
- 2022-05-25
- Ransomware use
- not known