Skip to content
Fencer Intel
high 7.5

CVE-2014-0160 kev in the critical feed json

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows re…

published 2014-04-07 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-0217

cvss
7.5
version 3.1, CNA
cisa kev
Exploited
added 2022-05-04
epss
100.0%
EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
public exploits
6
Metasploit, Exploit-DB

Summary

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Patch / fix

cisa required action Apply updates per vendor instructions.

  • openssl openssl 1.0.1g
  • filezilla-project filezilla_server 0.9.44
  • siemens elan-8.2 8.3.3
  • splunk splunk 6.0.3
  • openssl Debian 14, Debian 13, Debian 12 1.0.1g-1

debian advisories DEBIAN-CVE-2014-0160

  • rhevm-spice-client rhev manager 3 3.3-12.el6_5
  • rhevm-spice-client-x64-cab rhev manager 3 3.3-12.el6_5
  • rhevm-spice-client-x64-msi rhev manager 3 3.3-12.el6_5
  • rhevm-spice-client-x86-cab rhev manager 3 3.3-12.el6_5
  • rhevm-spice-client-x86-msi rhev manager 3 3.3-12.el6_5
  • rhev-hypervisor6 RHEL 6 6.5-20140118.1.3.2.el6_5
  • openssl storage 2.1, RHEL 6 1.0.1e-16.el6_5.7
  • openssl-perl storage 2.1, RHEL 6 1.0.1e-16.el6_5.7

red hat advisories RHSA-2014:0416RHSA-2014:0396RHSA-2014:0377RHSA-2014:0376RHSA-2014:0378

  • stunnel openSUSE Tumbleweed 5.38-1.1
  • tor openSUSE Tumbleweed 0.2.8.11-1.1
  • httrack openSUSE Tumbleweed 3.48.22-1.3
  • openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2

opensuse advisories openSUSE-SU-2024:10289-1openSUSE-SU-2024:10423-1openSUSE-SU-2024:10580-1openSUSE-SU-2024:11127-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-0160 updated cvss 5.0

openssl: information disclosure in handling of TLS heartbeat extension packets

  • Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl 1.0.1e-16.el6_5.7, openssl-perl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl 1.0.1e-16.el6_5.7, openssl-perl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux Server (v. 6) openssl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux Server Optional (v. 6) openssl 1.0.1e-16.el6_5.7, openssl-perl 1.0.1e-16.el6_5.7
    +2 more products
    Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.1e-16.el6_5.7 Red Hat Enterprise Linux Workstation Optional (v. 6) openssl 1.0.1e-16.el6_5.7, openssl-perl 1.0.1e-16.el6_5.7
    fixed: vendor fix RHSA-2014:0376
  • Red Hat Storage Server 2.1 openssl 1.0.1e-16.el6_5.7, openssl-perl 1.0.1e-16.el6_5.7
    fixed: vendor fix RHSA-2014:0377
  • Red Hat RHEV Hypervisor for RHEL-6 rhev-hypervisor6 6.5-20140407.0.el6ev, rhev-hypervisor6 6.5-20140118.1.3.2.el6_5
    fixed: vendor fix RHSA-2014:0396
  • Red Hat RHEV-M 3.3 rhevm-spice-client 3.3-12.el6_5, rhevm-spice-client-x64-cab 3.3-12.el6_5, rhevm-spice-client-x64-msi 3.3-12.el6_5, rhevm-spice-client-x86-cab 3.3-12.el6_5, rhevm-spice-client-x86-msi 3.3-12.el6_5
    fixed: vendor fix RHSA-2014:0416
  • Red Hat Enterprise Linux 5 openssl, openssl097a Red Hat Enterprise Linux 6 openssl098e Red Hat Enterprise Linux 7 openssl, openssl098e, openssl-libs, openssl-perl Red Hat JBoss Enterprise Application Platform 5 openssl Red Hat JBoss Enterprise Application Platform 6 openssl
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-14-135-05 updated cvss 5.0

OpenSSL Vulnerability

  • OpenSSL >=1.0.1, <=1.0.1f, 1.0.2-beta1
    affected: mitigation “Asset owners and operators should contact their product vendor to check for availability of updates.”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-135-04 updated cvss 5.0

Unified Automation OPC SDK OpenSSL Vulnerability

  • Unified Automation ANSI C based OPC UA SDK V1.4.0_Windows Unified Automation C++ based OPC UA SDK V1.4.0_Windows
    affected: mitigation “Disable HTTPS transport by configuration in the C++ SDK (default)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-135-02 updated cvss 5.0

Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability

  • Schneider Electric Tableau Server >=8.0.6, <=8.0.9, >=8.1.0, <=8.1.5
    affected: mitigation wdn.wonderware.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-128-01 updated cvss 5.0

Digi International OpenSSL Vulnerability

  • Digi International ConnectPort LTS, X2e Digi International Digi Embedded Linux 5.9 Digi International Digi Embedded Yocto 1.4 Digi International Wireless Vehicle Bus Adapter (WVA)
    affected: mitigation “Digi International published a Security Notice OpenSSL “Heartbleed” on April 14, 2014, updated on April 18, 2014, at the following URL: (http://www.digi.com/support/kbase/kbaseresultdetl?id=3564)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-126-01A updated cvss 5.0

ABB Relion 650 Series OpenSSL Vulnerability (Update A)

  • ABB 650 series 1.3.0
    affected: mitigation

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-105-03B updated cvss 5.0

Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

  • Siemens APE 2.0 (when SSL/TLS component is used in customer implementation) Siemens CP1543-1 (when FTPS active) V1.1 Siemens eLAN-8.2 eLAN (when RIP is used) <8.3.3 Siemens S7-1500 (when HTTPS active) V1.5 Siemens WinCC OA only V3.12
    affected: mitigation “eLAN-8.2. To obtain the update to Version 8.3.3, submit a support request online at: (http://www.siemens.com/automation/support-request)” portal.etm.at

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-15-344-01B updated cvss 7.5

Advantech EKI Vulnerabilities (Update B)

  • Advantech EKI-132x platform devices
    affected: mitigation “Update to the latest version. (http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-132*&searchtabs=Firmware)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-105-02A updated cvss 5.0

Innominate mGuard OpenSSL HeartBleed Vulnerability

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-114-01 updated cvss 5.0

Certec atvise scada OpenSSL Heartbleed Vulnerability

  • Certec atvise scada >=2.3
    affected: mitigation “For more information, please see Certec’s security update at the following location: (http://www.atvise.com/en/news-events/news/260-important-security-update-heartbleed-bug)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (Metasploit auxiliary/scanner/ssl/openssl_heartbleed)
  3. Added to CISA KEV
  4. CISA patch deadline
  5. CISA SSVC: exploitation active

Known exploited

Added
4 y ago
Patch by
2022-05-25 (4 y ago)
Ransomware
Not known
Required action
Apply updates per vendor instructions.
Vendor, product
OpenSSL, OpenSSL
CISA name
OpenSSL Information Disclosure Vulnerability

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
yes
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

100.00% chance of exploitation in the next 30 days, higher than 99.9% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit auxiliary/scanner/ssl/openssl_heartbleed OpenSSL Heartbeat (Heartbleed) Information Leak metasploit auxiliary, normal rank, 2014-04-07
  • Metasploit auxiliary/server/openssl_heartbeat_client_memory OpenSSL Heartbeat (Heartbleed) Client Memory Exposure metasploit auxiliary, normal rank, 2014-04-07
  • EDB-32998 OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support) remote, 2014-04-24
  • EDB-32791 OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1) remote, 2014-04-10
  • EDB-32764 OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions) remote, 2014-04-09
  • EDB-32745 OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure remote, 2014-04-08
  • gist.github.com https://gist.github.com/chapmajs/10473815 referenced PoC, tagged "exploit" by a source, unverified
  • sku11army.blogspot.com https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html referenced PoC, tagged "exploit" by a source, unverified
  • yunus-shn.medium.com https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.