CVE-2014-0160

CVE-2014-0160 (Heartbleed) is an information-disclosure vulnerability in OpenSSL’s TLS/DTLS heartbeat implementation. Affected: OpenSSL 1.0.1 before 1.0.1g. Root cause: improper handling of the Heartbeat extension (d1_both.c, t1_lib.c) leading to a buffer over-read, enabling an attacker to read m...

CVE-2014-0224

The OpenSSL library (versions before 0.9.8za , 1.0.0 before 1.0.0m , and 1.0.1 before 1.0.1h ) is vulnerable to the CCS Injection vulnerability. The issue stems from an improper limitation on processing ChangeCipherSpec messages, allowing a man-in-the-middle attacker to trigger the use of a zero-...