{"cve_id":"CVE-2014-0160","published":"2014-04-07T22:55:03.893000+00:00","last_modified":"2026-06-17T00:02:24.467000+00:00","vuln_status":"Analyzed","description":"The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","base_score":7.5,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"NONE","impact_a":"NONE","cwe_ids":["CWE-125"],"in_kev":true,"kev_date_added":"2022-05-04","kev_ransomware":false,"epss_score":0.99999,"epss_percentile":0.99996,"cap_rule_version":"0.1.1","stage":"RECON","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["INFO_DISCLOSURE"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:16:21.300604+00:00","first_seen":"2014-04-07T22:55:03.893000+00:00","kev_first_seen":"2022-05-04T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["broadcom","canonical","debian","fedoraproject","filezilla-project","intellian","mitel","openssl","opensuse","redhat","ricon","siemens","splunk"],"products":["application_processing_engine","application_processing_engine_firmware","cp_1543-1","cp_1543-1_firmware","debian_linux","elan-8.2","enterprise_linux_desktop","enterprise_linux_server","enterprise_linux_server_aus","enterprise_linux_server_eus","enterprise_linux_server_tus","enterprise_linux_workstation","fedora","filezilla_server","gluster_storage","micollab","mivoice","openssl","opensuse","s9922l","s9922l_firmware","simatic_s7-1500","simatic_s7-1500_firmware","simatic_s7-1500t","simatic_s7-1500t_firmware","splunk","storage","symantec_messaging_gateway","ubuntu_linux","v100","v100_firmware","v60","v60_firmware","virtualization","wincc_open_architecture"],"affected":[{"vendor":"broadcom","product":"symantec_messaging_gateway","ranges":["10.6.1","10.6.0"]},{"vendor":"canonical","product":"ubuntu_linux","ranges":["12.04","13.10","12.10"]},{"vendor":"debian","product":"debian_linux","ranges":["7.0","6.0","8.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["20","19"]},{"vendor":"filezilla-project","product":"filezilla_server","ranges":["< 0.9.44"]},{"vendor":"intellian","product":"v100_firmware","ranges":["1.20","1.21","1.24"]},{"vendor":"intellian","product":"v60_firmware","ranges":["1.15","1.25"]},{"vendor":"mitel","product":"micollab","ranges":["7.3","6.0","7.0","7.1","7.2","7.3.0.104"]},{"vendor":"mitel","product":"mivoice","ranges":["1.3.2.2","1.1.2.5","1.1.3.3","1.2.0.11","1.4.0.102"]},{"vendor":"openssl","product":"openssl","ranges":["≥ 1.0.1 and < 1.0.1g"]},{"vendor":"opensuse","product":"opensuse","ranges":["13.1","12.3"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["6.0"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["6.0"]},{"vendor":"redhat","product":"enterprise_linux_server_aus","ranges":["6.5"]},{"vendor":"redhat","product":"enterprise_linux_server_eus","ranges":["6.5"]},{"vendor":"redhat","product":"enterprise_linux_server_tus","ranges":["6.5"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["6.0"]},{"vendor":"redhat","product":"gluster_storage","ranges":["2.1"]},{"vendor":"redhat","product":"storage","ranges":["2.1"]},{"vendor":"redhat","product":"virtualization","ranges":["6.0"]},{"vendor":"ricon","product":"s9922l_firmware","ranges":["16.10.3\\(3794\\)"]},{"vendor":"siemens","product":"application_processing_engine_firmware","ranges":["2.0"]},{"vendor":"siemens","product":"cp_1543-1_firmware","ranges":["1.1"]},{"vendor":"siemens","product":"elan-8.2","ranges":["< 8.3.3"]},{"vendor":"siemens","product":"simatic_s7-1500_firmware","ranges":["1.5"]},{"vendor":"siemens","product":"simatic_s7-1500t_firmware","ranges":["1.5"]},{"vendor":"siemens","product":"wincc_open_architecture","ranges":["3.12"]},{"vendor":"splunk","product":"splunk","ranges":["≥ 6.0.0 and < 6.0.3"]}]}