CVE-2014-0160

openssl, filezilla-project filezilla server, siemens application processing engine firmware

Published 7 Apr 2014 · updated 17 Jun 2026 · Analyzed

7.5 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 4 May 2022, with a remediation deadline of 25 May 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

References

advisories.mageia.org/MGASA-2014-0165.html · Third Party Advisory
blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/ · Issue Tracking, Third Party Advisory
cogentdatahub.com/ReleaseNotes.html · Release Notes
download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01 · Broken Link
git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3 · Broken Link
heartbleed.com/ · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html · Broken Link, Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html · Broken Link, Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html · Mailing List, Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html · Mailing List, Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html · Mailing List, Third Party Advisory
lists.opensuse.org/opensuse-updates/2014-04/msg00061.html · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139722163017074&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139757726426985&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139757819327350&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139757919027752&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139758572430452&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139765756720506&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139774054614965&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139774703817488&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139808058921905&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139817685517037&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139817727317190&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139817782017443&w=2 · Mailing List, Third Party Advisory
marc.info/?l=bugtraq&m=139824923705461&w=2 · Mailing List, Third Party Advisory