The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-staticUpgrade openssl-perl | Dec 1, 2016 | Apr 7, 2014 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Jan 9, 2023 | Apr 7, 2014 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Apr 7, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade opensslUpgrade mingw32-openssl | Dec 10, 2025 | Apr 7, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-libs/openssl. | Oct 30, 2017 | Apr 7, 2014 |
| Google Android | — | Upgrade to the latest version of Google Android | Oct 8, 2014 | Apr 7, 2014 |
| Hp Ilo | — | Upgrade HP iLO 2 to version 2.27 | Aug 1, 2018 | Apr 7, 2014 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Apr 7, 2014 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Apr 7, 2014 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 8, 2014 | Apr 7, 2014 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 7, 2014 | Apr 7, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Apr 7, 2014 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-staticUpgrade openssl-devel | May 13, 2016 | Apr 7, 2014 |
| Progress Moveit Transfer | — | Upgrade Progress MOVEit Transfer to the latest version | Nov 12, 2025 | Apr 16, 2020 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.4R3Update Pulse Connect Secure to version 7.4R2Update Pulse Connect Secure to version 8.0R1Update Pulse Connect Secure to version 8.0R3.2Update Pulse Connect Secure to version 7.4R1Update Pulse Connect Secure to version 7.4R9.3Update Pulse Connect Secure to version 8.0R3 | Oct 28, 2020 | Apr 7, 2014 |
| Suse | — | Upgrade openssl1Upgrade libopenssl1_0_0-x86Upgrade libopenssl-develUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_0_0Upgrade libopenssl-1_1-develUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1-32bitUpgrade opensslUpgrade openssl-1_1Upgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-hmacUpgrade libopenssl-1_0_0-develUpgrade openssl-1_0_0Upgrade openssl-docUpgrade libopenssl1-develUpgrade libopenssl1_1Upgrade libopenssl1_0_0-32bitUpgrade openssl-1_0_0-docUpgrade openssl1-docUpgrade stunnelUpgrade libopenssl-1_1-devel-32bit | Dec 18, 2015 | Apr 7, 2014 |
| Ubuntu | — | Upgrade libssl1.0.0 | Nov 8, 2024 | Apr 7, 2014 |
| Vmsa 2014 0004 | — | Upgrade VMware ESXi 5.5 to build number 1746018 | Oct 28, 2015 | Apr 7, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub