wizzard: (Default)
wizzard ([personal profile] wizzard) wrote2014-04-08 11:30 am
  • Add Memory
  • Share This Entry
Entry tags:

OpenSSL 1.0.1-1.0.1f Remote Memory Access Vulnerability (CVE-2014-0160)



TLDR: Можно удаленно читать память сервера, включая секретные ключи и всё-всё-всё.
У кого не было PFS - тот попал особенно.

Уязвимы билды от 14 марта 2012 до 7 апреля 2014. Да здравствует массовая замена ключей!

Read more: https://heartbleed.com/
  • Add Memory
  • Share This Entry
(0 comments)

Post a comment in response:

(will be screened)
(will be screened if not validated)
If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org

 
Notice: This account is set to log the IP addresses of everyone who comments.
Links will be displayed as unclickable URLs to help prevent spam.