The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openssl-perlUpgrade openssl-staticUpgrade opensslUpgrade openssl-devel | Dec 1, 2016 | Apr 7, 2014 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Jan 9, 2023 | Apr 7, 2014 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Apr 7, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade opensslUpgrade mingw32-openssl | Dec 10, 2025 | Apr 7, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-libs/openssl. | Oct 30, 2017 | Apr 7, 2014 |
| Google Android | — | Upgrade to the latest version of Google Android | Oct 8, 2014 | Apr 7, 2014 |
| Hp Ilo | — | Upgrade HP iLO 2 to version 2.27 | Aug 1, 2018 | Apr 7, 2014 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Apr 7, 2014 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Apr 7, 2014 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 8, 2014 | Apr 7, 2014 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 7, 2014 | Apr 7, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Apr 7, 2014 |
| Oracle_linux | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-static | May 13, 2016 | Apr 7, 2014 |
| Progress Moveit Transfer | — | Upgrade Progress MOVEit Transfer to the latest version | Nov 12, 2025 | Apr 16, 2020 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.0R3.2Update Pulse Connect Secure to version 8.0R1Update Pulse Connect Secure to version 7.4R3Update Pulse Connect Secure to version 7.4R2Update Pulse Connect Secure to version 7.4R9.3Update Pulse Connect Secure to version 7.4R1Update Pulse Connect Secure to version 8.0R3 | Oct 28, 2020 | Apr 7, 2014 |
| Suse | — | Upgrade opensslUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl-1_1-develUpgrade openssl1Upgrade libopenssl1_0_0Upgrade libopenssl-develUpgrade libopenssl1_0_0-x86Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1Upgrade stunnelUpgrade libopenssl1_0_0-hmacUpgrade openssl1-docUpgrade openssl-docUpgrade openssl-1_1Upgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-32bitUpgrade openssl-1_0_0-docUpgrade libopenssl-1_0_0-develUpgrade openssl-1_0_0Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1-devel | Dec 18, 2015 | Apr 7, 2014 |
| Ubuntu | — | Upgrade libssl1.0.0 | Nov 8, 2024 | Apr 7, 2014 |
| Vmsa 2014 0004 | — | Upgrade VMware ESXi 5.5 to build number 1746018 | Oct 28, 2015 | Apr 7, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub