EDB-32998
functionalOpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)
view exploit source exploit_dbverifiedtype remoteauthor Ayman Sagypublished 2014-04-24catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0346US | — | Exploit | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0160. Reason: This candidate is a reservation duplicate of CVE-2014-0160. Notes: All CVE users should ref… | ||||
| CVE-2014-0160US | high7.5OT critical | KEV | ||
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan