The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade opensslUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-devel | Dec 1, 2016 | Apr 7, 2014 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Jan 9, 2023 | Apr 7, 2014 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Apr 7, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade mingw32-opensslUpgrade openssl | Dec 10, 2025 | Apr 7, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-libs/openssl. | Oct 30, 2017 | Apr 7, 2014 |
| Google Android | — | Upgrade to the latest version of Google Android | Oct 8, 2014 | Apr 7, 2014 |
| Hp Ilo | — | Upgrade HP iLO 2 to version 2.27 | Aug 1, 2018 | Apr 7, 2014 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Apr 7, 2014 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Apr 7, 2014 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 8, 2014 | Apr 7, 2014 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 7, 2014 | Apr 7, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Apr 7, 2014 |
| Oracle_linux | — | Upgrade openssl-develUpgrade openssl-staticUpgrade opensslUpgrade openssl-perl | May 13, 2016 | Apr 7, 2014 |
| Progress Moveit Transfer | — | Upgrade Progress MOVEit Transfer to the latest version | Nov 12, 2025 | Apr 16, 2020 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.4R3Update Pulse Connect Secure to version 8.0R1Update Pulse Connect Secure to version 8.0R3.2Update Pulse Connect Secure to version 7.4R2Update Pulse Connect Secure to version 7.4R9.3Update Pulse Connect Secure to version 8.0R3Update Pulse Connect Secure to version 7.4R1 | Oct 28, 2020 | Apr 7, 2014 |
| Suse | — | Upgrade libopenssl1_1-hmacUpgrade openssl-1_1Upgrade libopenssl1_0_0-hmacUpgrade libopenssl1-develUpgrade openssl-1_0_0-docUpgrade libopenssl1_1Upgrade openssl-docUpgrade openssl-1_0_0Upgrade libopenssl-1_1-devel-32bitUpgrade openssl1-docUpgrade libopenssl-1_0_0-develUpgrade libopenssl1_0_0-32bitUpgrade stunnelUpgrade libopenssl1_0_0-x86Upgrade libopenssl-develUpgrade libopenssl1_0_0-hmac-32bitUpgrade opensslUpgrade libopenssl-1_1-develUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_0_0Upgrade libopenssl1_1-32bitUpgrade openssl1 | Dec 18, 2015 | Apr 7, 2014 |
| Ubuntu | — | Upgrade libssl1.0.0 | Nov 8, 2024 | Apr 7, 2014 |
| Vmsa 2014 0004 | — | Upgrade VMware ESXi 5.5 to build number 1746018 | Oct 28, 2015 | Apr 7, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub