Lucene search
C37hunH1:32570HistoryOct 23, 2014 - 3:12 p.m.
Mail.ru: OpenSSL HeartBleed (CVE-2014-0160)
2014-10-2315:12:13
c37hun
hackerone.com
$200
54
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.976 High
EPSS
Percentile
100.0%
Уязвимость существует на portal.sf.mail.ru
Эта уязвимость позволяет читать оперативную память кусками размером до 64КБ. Причем уязвимость двусторонняя, это значит, что не только вы можете читать данные с уязвимого сервера, но и сервер злоумышленника может получить часть вашей оперативной памяти как это сделал и я ради чистого эксперимента.
Related
intel
intel
Multiple Intel Software Products and API Services impacted by CVE-2014-0160
2014-04-30 00:00:00
osv
osv
openssl - security update
2014-04-07 00:00:00
packetstorm
packetstorm
OpenSSL Heartbeat (Heartbleed) Information Leak
2014-04-10 00:00:00
OpenSSL TLS Heartbeat Extension Memory Disclosure
2014-04-08 00:00:00
Heartbleed Proof Of Concept
2014-04-08 00:00:00
nessus
nessus
HP Version Control Agent (VCA) Heartbeat Information Disclosure (Heartbleed)
2014-08-06 00:00:00
Websense Email Security Heartbeat Information Disclosure (Heartbleed)
2014-04-29 00:00:00
Oracle Linux 6 : openssl (ELSA-2014-0376)
2014-04-08 00:00:00
seebug
seebug
Kerio Control OpenSSL TLS心跳信息泄漏漏洞
2014-04-16 00:00:00
Splunk OpenSSL TLS心跳信息泄漏漏洞
2014-04-16 00:00:00
OpenSSL TLS Heartbeat Extension - Memory Disclosure
2014-07-01 00:00:00
openvas
openvas
Oracle Linux Local Check: ELSA-2014-0376
2015-10-06 00:00:00
RedHat Update for openssl RHSA-2014:0376-01
2014-04-08 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2014:0492-1)
2014-04-10 00:00:00
symantec
symantec
ibm
ibm
thn
thn
How to Protect yourself from the 'Heartbleed' Bug
2014-04-10 07:58:00
Over 199,500 Websites Are Still Vulnerable to Heartbleed OpenSSL Bug
2017-01-22 23:27:00
Heartbleed - OpenSSL Zero-day Bug leaves Millions of websites Vulnerable
2014-04-08 08:23:00
hp
hp
securityvulns
securityvulns
prion
prion
Buffer overflow
2014-04-07 22:55:00
exploitpack
exploitpack
OpenSSL TLS Heartbeat Extension - Heartbleed Memory Disclosure
2014-04-08 00:00:00
zdt
zdt
OpenSSL 1.0.1f TLS Heartbeat Extension - Memory Disclosure (Multiple SSL/TLS versions)
2014-04-09 00:00:00
OpenSSL Heartbeat (Heartbleed) Information Leak Exploit
2014-04-10 00:00:00
OpenSSL TLS Heartbeat Extension - Memory Disclosure
2014-04-08 00:00:00
ics
ics
OpenSSL Vulnerability
2018-08-27 12:00:00
Certec atvise scada OpenSSL Heartbleed Vulnerability
2018-08-23 12:00:00
Unified Automation OPC SDK OpenSSL Vulnerability
2018-09-06 12:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-0160
2014-04-07 00:00:00
kitploit
kitploit
Collection of Heartbleed Tools (OpenSSL CVE-2014-0160)
2014-04-10 00:55:00
sslscan - tests SSL/TLS enabled services to discover supported cipher suites
2016-12-26 14:30:00
checkpoint_security
checkpoint_security
Check Point response to OpenSSL vulnerability (CVE-2014-0160)
2014-04-07 21:00:00
n0where
n0where
Access Point Impersonation Attacks: hostapd-wpe
2016-04-12 22:19:39
suse
suse
update for openssl (important)
2014-04-08 13:04:15
atlassian
atlassian
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
fortinet
fortinet
Information Disclosure Vulnerability in OpenSSL (Heartbleed)
2014-04-08 00:00:00
vulnerlab
vulnerlab
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
attackerkb
attackerkb
CVE-2014-0160 (AKA: Heartbleed)
2014-04-07 00:00:00
f5
f5
K15159 : OpenSSL vulnerability CVE-2014-0160
2015-02-16 00:00:00
SOL15159 - OpenSSL vulnerability CVE-2014-0160
2014-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2014-0160
2014-04-07 00:00:00
hackerone
hackerone
Internet Bug Bounty: TLS heartbeat read overrun
2014-04-05 23:51:06
Mail.ru: Heartbleed: my.com (185.30.178.33) port 1433
2015-01-19 13:54:12
Mail.ru: scfbp.tng.mail.ru: Heartbleed
2015-02-25 07:49:11
debian
debian
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
[SECURITY] [DSA 2896-1] openssl security update
2014-04-07 21:36:46
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
veracode
veracode
Information Disclosure Through Buffer Over-read
2019-01-15 09:00:11
malwarebytes
malwarebytes
Five years later, Heartbleed vulnerability still unpatched
2019-09-12 15:00:00
threatpost
threatpost
Oracle Gives Heartbleed Update, Patches 14 Products
2014-04-21 13:55:42
April 2014 Oracle Critical Patch Update
2014-04-16 12:32:06
Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug
2014-04-17 11:40:41
redhat
redhat
(RHSA-2014:0396) Important: rhev-hypervisor6 security update
2014-04-10 00:00:00
(RHSA-2014:0376) Important: openssl security update
2014-04-08 00:00:00
freebsd
freebsd
OpenSSL -- Remote Information Disclosure
2014-04-07 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-04-07 00:00:00
qt
qt
Heartbleed Bug (CVE-2014-0160) and Qt
2014-04-10 00:00:00
myhack58
myhack58
cert
cert
cisco
cisco
OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
2014-04-09 03:00:00
OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability
2014-04-08 14:39:29
debiancve
debiancve
CVE-2014-0160
2014-04-07 22:55:00
centos
centos
openssl security update
2014-04-08 02:54:58
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)
2014-12-28 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.976 High
EPSS
Percentile
100.0%
Related for H1:32570