All CVE records
CVE-2014-0160 — OpenSSL Information Disclosure Vulnerability
CISA KEV listed
Added May 4, 2022 Remediate by May 25, 2022
Description
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.