CVE-2014-0160

KEV
Published: Apr 07, 2014 Last Modified: Ott 22, 2025
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
MEDIUM 5,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9446
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

125

Out-of-bounds Read

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Availability Other
Potential Impacts:
Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Varies By Context
Applicable Platforms
Languages: C, C++, Memory-Unsafe
Technologies: ICS/OT
View CWE Details
Exploit

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure

Verified

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure

Author: Jared Stafford Published: Status: Verified
View Exploit Code →
Exploit

OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory …

Verified

OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)

Author: Fitzl Csaba Published: Status: Verified
View Exploit Code →
Exploit

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak …

Verified

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)

Author: prdelka Published: Status: Verified
View Exploit Code →
Exploit

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak …

Verified

OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)

Author: Ayman Sagy Published: Status: Verified
View Exploit Code →
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 6.0
cpe:2.3:a:mitel:micollab:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 6.0
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Application Processing Engine Firmware by Siemens

Product Information
Vendor Siemens
Product Application Processing Engine Firmware
Version 2.0
cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Symantec Messaging Gateway by Broadcom

Product Information
Vendor Broadcom
Product Symantec Messaging Gateway
Version 10.6.0
cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 6.5
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 7.0
cpe:2.3:a:mitel:micollab:7.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Mivoice by Mitel

Product Information
Vendor Mitel
Product Mivoice
Version 1.3.2.2
cpe:2.3:a:mitel:mivoice:1.3.2.2:*:*:*:*:skype_for_business:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Mivoice by Mitel

Product Information
Vendor Mitel
Product Mivoice
Version 1.2.0.11
cpe:2.3:a:mitel:mivoice:1.2.0.11:*:*:*:*:skype_for_business:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Virtualization by Redhat

Product Information
Vendor Redhat
Product Virtualization
Version 6.0
cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Filezilla Server by Filezilla-Project

Product Information
Vendor Filezilla-Project
Product Filezilla Server
Version Range Affected
To 0.9.44 (exclusive)
cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Eus
Version 6.5
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Mivoice by Mitel

Product Information
Vendor Mitel
Product Mivoice
Version 1.1.2.5
cpe:2.3:a:mitel:mivoice:1.1.2.5:*:*:*:*:lync:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Storage by Redhat

Product Information
Vendor Redhat
Product Storage
Version 2.1
cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 19
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Gluster Storage by Redhat

Product Information
Vendor Redhat
Product Gluster Storage
Version 2.1
cpe:2.3:a:redhat:gluster_storage:2.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 13.10
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Simatic S7-1500T Firmware by Siemens

Product Information
Vendor Siemens
Product Simatic S7-1500T Firmware
Version 1.5
cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

V100 Firmware by Intellian

Product Information
Vendor Intellian
Product V100 Firmware
Version 1.24
cpe:2.3:o:intellian:v100_firmware:1.24:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 6.5
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 12.04
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

V60 Firmware by Intellian

Product Information
Vendor Intellian
Product V60 Firmware
Version 1.15
cpe:2.3:o:intellian:v60_firmware:1.15:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Simatic S7-1500 Firmware by Siemens

Product Information
Vendor Siemens
Product Simatic S7-1500 Firmware
Version 1.5
cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server
Version 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 7.2
cpe:2.3:a:mitel:micollab:7.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

S9922L Firmware by Ricon

Product Information
Vendor Ricon
Product S9922L Firmware
Version 16.10.3\(3794\)
cpe:2.3:o:ricon:s9922l_firmware:16.10.3\(3794\):*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Openssl by Openssl

Product Information
Vendor Openssl
Product Openssl
Version Range Affected
From 1.0.1 (inclusive)
To 1.0.1g (exclusive)
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Opensuse by Opensuse

Product Information
Vendor Opensuse
Product Opensuse
Version 13.1
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

V100 Firmware by Intellian

Product Information
Vendor Intellian
Product V100 Firmware
Version 1.20
cpe:2.3:o:intellian:v100_firmware:1.20:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Mivoice by Mitel

Product Information
Vendor Mitel
Product Mivoice
Version 1.1.3.3
cpe:2.3:a:mitel:mivoice:1.1.3.3:*:*:*:*:skype_for_business:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Wincc Open Architecture by Siemens

Product Information
Vendor Siemens
Product Wincc Open Architecture
Version 3.12
cpe:2.3:a:siemens:wincc_open_architecture:3.12:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

V100 Firmware by Intellian

Product Information
Vendor Intellian
Product V100 Firmware
Version 1.21
cpe:2.3:o:intellian:v100_firmware:1.21:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cp 1543-1 Firmware by Siemens

Product Information
Vendor Siemens
Product Cp 1543-1 Firmware
Version 1.1
cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Elan-8.2 by Siemens

Product Information
Vendor Siemens
Product Elan-8.2
Version Range Affected
To 8.3.3 (exclusive)
cpe:2.3:a:siemens:elan-8.2:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 7.3
cpe:2.3:a:mitel:micollab:7.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

V60 Firmware by Intellian

Product Information
Vendor Intellian
Product V60 Firmware
Version 1.25
cpe:2.3:o:intellian:v60_firmware:1.25:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Symantec Messaging Gateway by Broadcom

Product Information
Vendor Broadcom
Product Symantec Messaging Gateway
Version 10.6.1
cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 7.1
cpe:2.3:a:mitel:micollab:7.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Opensuse by Opensuse

Product Information
Vendor Opensuse
Product Opensuse
Version 12.3
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 12.10
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Workstation by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Workstation
Version 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Mivoice by Mitel

Product Information
Vendor Mitel
Product Mivoice
Version 1.4.0.102
cpe:2.3:a:mitel:mivoice:1.4.0.102:*:*:*:*:skype_for_business:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Desktop by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Desktop
Version 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Micollab by Mitel

Product Information
Vendor Mitel
Product Micollab
Version 7.3.0.104
cpe:2.3:a:mitel:micollab:7.3.0.104:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Splunk by Splunk

Product Information
Vendor Splunk
Product Splunk
Version Range Affected
From 6.0.0 (inclusive)
To 6.0.3 (exclusive)
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 20
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014…
http://advisories.mageia.org/MGASA-2014-0165.html
http://advisories.mageia.org/MGASA-2014-0165.html
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-li…
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
http://cogentdatahub.com/ReleaseNotes.html
http://cogentdatahub.com/ReleaseNotes.html
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD…
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh…
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f3…
http://heartbleed.com/
http://heartbleed.com/
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.ht…
http://lists.opensuse.org/opensuse-security-announce/2014-0…
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2014-0…
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061…
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html
http://marc.info/?l=bugtraq&m=139722163017074&w=2
http://marc.info/?l=bugtraq&m=139722163017074&w=2
http://marc.info/?l=bugtraq&m=139757726426985&w=2
http://marc.info/?l=bugtraq&m=139757726426985&w=2
http://marc.info/?l=bugtraq&m=139757819327350&w=2
http://marc.info/?l=bugtraq&m=139757819327350&w=2
http://marc.info/?l=bugtraq&m=139757919027752&w=2
http://marc.info/?l=bugtraq&m=139757919027752&w=2
http://marc.info/?l=bugtraq&m=139758572430452&w=2
http://marc.info/?l=bugtraq&m=139758572430452&w=2
http://marc.info/?l=bugtraq&m=139765756720506&w=2
http://marc.info/?l=bugtraq&m=139765756720506&w=2
http://marc.info/?l=bugtraq&m=139774054614965&w=2
http://marc.info/?l=bugtraq&m=139774054614965&w=2
http://marc.info/?l=bugtraq&m=139774703817488&w=2
http://marc.info/?l=bugtraq&m=139774703817488&w=2
http://marc.info/?l=bugtraq&m=139808058921905&w=2
http://marc.info/?l=bugtraq&m=139808058921905&w=2
http://marc.info/?l=bugtraq&m=139817685517037&w=2
http://marc.info/?l=bugtraq&m=139817685517037&w=2
http://marc.info/?l=bugtraq&m=139817727317190&w=2
http://marc.info/?l=bugtraq&m=139817727317190&w=2
http://marc.info/?l=bugtraq&m=139817782017443&w=2
http://marc.info/?l=bugtraq&m=139817782017443&w=2
http://marc.info/?l=bugtraq&m=139824923705461&w=2
http://marc.info/?l=bugtraq&m=139824923705461&w=2
http://marc.info/?l=bugtraq&m=139824993005633&w=2
http://marc.info/?l=bugtraq&m=139824993005633&w=2
http://marc.info/?l=bugtraq&m=139833395230364&w=2
http://marc.info/?l=bugtraq&m=139833395230364&w=2
http://marc.info/?l=bugtraq&m=139835815211508&w=2
http://marc.info/?l=bugtraq&m=139835815211508&w=2
http://marc.info/?l=bugtraq&m=139835844111589&w=2
http://marc.info/?l=bugtraq&m=139835844111589&w=2
http://marc.info/?l=bugtraq&m=139836085512508&w=2
http://marc.info/?l=bugtraq&m=139836085512508&w=2
http://marc.info/?l=bugtraq&m=139842151128341&w=2
http://marc.info/?l=bugtraq&m=139842151128341&w=2
http://marc.info/?l=bugtraq&m=139843768401936&w=2
http://marc.info/?l=bugtraq&m=139843768401936&w=2
http://marc.info/?l=bugtraq&m=139869720529462&w=2
http://marc.info/?l=bugtraq&m=139869720529462&w=2
http://marc.info/?l=bugtraq&m=139869891830365&w=2
http://marc.info/?l=bugtraq&m=139869891830365&w=2
http://marc.info/?l=bugtraq&m=139889113431619&w=2
http://marc.info/?l=bugtraq&m=139889113431619&w=2
http://marc.info/?l=bugtraq&m=139889295732144&w=2
http://marc.info/?l=bugtraq&m=139889295732144&w=2
http://marc.info/?l=bugtraq&m=139905202427693&w=2
http://marc.info/?l=bugtraq&m=139905202427693&w=2
http://marc.info/?l=bugtraq&m=139905243827825&w=2
http://marc.info/?l=bugtraq&m=139905243827825&w=2
http://marc.info/?l=bugtraq&m=139905295427946&w=2
http://marc.info/?l=bugtraq&m=139905295427946&w=2
http://marc.info/?l=bugtraq&m=139905351928096&w=2
http://marc.info/?l=bugtraq&m=139905351928096&w=2
http://marc.info/?l=bugtraq&m=139905405728262&w=2
http://marc.info/?l=bugtraq&m=139905405728262&w=2
http://marc.info/?l=bugtraq&m=139905458328378&w=2
http://marc.info/?l=bugtraq&m=139905458328378&w=2
http://marc.info/?l=bugtraq&m=139905653828999&w=2
http://marc.info/?l=bugtraq&m=139905653828999&w=2
http://marc.info/?l=bugtraq&m=139905868529690&w=2
http://marc.info/?l=bugtraq&m=139905868529690&w=2
http://marc.info/?l=bugtraq&m=140015787404650&w=2
http://marc.info/?l=bugtraq&m=140015787404650&w=2
http://marc.info/?l=bugtraq&m=140075368411126&w=2
http://marc.info/?l=bugtraq&m=140075368411126&w=2
http://marc.info/?l=bugtraq&m=140724451518351&w=2
http://marc.info/?l=bugtraq&m=140724451518351&w=2
http://marc.info/?l=bugtraq&m=140752315422991&w=2
http://marc.info/?l=bugtraq&m=140752315422991&w=2
http://marc.info/?l=bugtraq&m=141287864628122&w=2
http://marc.info/?l=bugtraq&m=141287864628122&w=2
http://marc.info/?l=bugtraq&m=142660345230545&w=2
http://marc.info/?l=bugtraq&m=142660345230545&w=2
http://public.support.unisys.com/common/public/vulnerabilit…
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp…
http://public.support.unisys.com/common/public/vulnerabilit…
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp…
http://rhn.redhat.com/errata/RHSA-2014-0376.html
http://rhn.redhat.com/errata/RHSA-2014-0376.html
http://rhn.redhat.com/errata/RHSA-2014-0377.html
http://rhn.redhat.com/errata/RHSA-2014-0377.html
http://rhn.redhat.com/errata/RHSA-2014-0378.html
http://rhn.redhat.com/errata/RHSA-2014-0378.html
http://rhn.redhat.com/errata/RHSA-2014-0396.html
http://rhn.redhat.com/errata/RHSA-2014-0396.html
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
https://bugzilla.redhat.com/show_bug.cgi?id=1084875
https://bugzilla.redhat.com/show_bug.cgi?id=1084875
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.…
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf
https://code.google.com/p/mod-spdy/issues/detail?id=85
https://code.google.com/p/mod-spdy/issues/detail?id=85
http://seclists.org/fulldisclosure/2014/Apr/109
http://seclists.org/fulldisclosure/2014/Apr/109
http://seclists.org/fulldisclosure/2014/Apr/173
http://seclists.org/fulldisclosure/2014/Apr/173
http://seclists.org/fulldisclosure/2014/Apr/190
http://seclists.org/fulldisclosure/2014/Apr/190
http://seclists.org/fulldisclosure/2014/Apr/90
http://seclists.org/fulldisclosure/2014/Apr/90
http://seclists.org/fulldisclosure/2014/Apr/91
http://seclists.org/fulldisclosure/2014/Apr/91
http://seclists.org/fulldisclosure/2014/Dec/23
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/57347
http://secunia.com/advisories/57347
http://secunia.com/advisories/57483
http://secunia.com/advisories/57483
http://secunia.com/advisories/57721
http://secunia.com/advisories/57721
http://secunia.com/advisories/57836
http://secunia.com/advisories/57836
http://secunia.com/advisories/57966
http://secunia.com/advisories/57966
http://secunia.com/advisories/57968
http://secunia.com/advisories/57968
http://secunia.com/advisories/59139
http://secunia.com/advisories/59139
http://secunia.com/advisories/59243
http://secunia.com/advisories/59243
http://secunia.com/advisories/59347
http://secunia.com/advisories/59347
https://filezilla-project.org/versions.php?type=server
https://filezilla-project.org/versions.php?type=server
https://gist.github.com/chapmajs/10473815
https://gist.github.com/chapmajs/10473815
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/p…
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/…
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a…
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade…
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b…
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b…
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a0…
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407e…
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3…
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f0…
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-…
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-co…
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html
https://support.f5.com/kb/en-us/solutions/public/15000/100/…
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
https://support.f5.com/kb/en-us/solutions/public/15000/100/…
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=365…
http://support.citrix.com/article/CTX140605
http://support.citrix.com/article/CTX140605
https://www.cert.fi/en/reports/2014/vulnerability788210.html
https://www.cert.fi/en/reports/2014/vulnerability788210.html
https://www.mitel.com/en-ca/support/security-advisories/mit…
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-…
https://yunus-shn.medium.com/ricon-industrial-cellular-rout…
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack…
http://tools.cisco.com/security/center/content/CiscoSecurit…
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2…
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
http://www-01.ibm.com/support/docview.wss?uid=swg21670161
http://www-01.ibm.com/support/docview.wss?uid=swg21670161
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_…
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
http://www.blackberry.com/btsc/KB35882
http://www.blackberry.com/btsc/KB35882
http://www.debian.org/security/2014/dsa-2896
http://www.debian.org/security/2014/dsa-2896
http://www.exploit-db.com/exploits/32745
http://www.exploit-db.com/exploits/32745
http://www.exploit-db.com/exploits/32764
http://www.exploit-db.com/exploits/32764
http://www.f-secure.com/en/web/labs_global/fsc-2014-1
http://www.f-secure.com/en/web/labs_global/fsc-2014-1
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-…
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
http://www.getchef.com/blog/2014/04/09/chef-server-heartble…
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-rel…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.…
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf
http://www.kb.cert.org/vuls/id/720951
http://www.kb.cert.org/vuls/id/720951
http://www.kerio.com/support/kerio-control/release-history
http://www.kerio.com/support/kerio-control/release-history
http://www.mandriva.com/security/advisories?name=MDVSA-2015…
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
http://www.openssl.org/news/secadv_20140407.txt
http://www.openssl.org/news/secadv_20140407.txt
http://www.oracle.com/technetwork/topics/security/cpujul201…
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.oracle.com/technetwork/topics/security/opensslhe…
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-016…
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/bid/66690
http://www.securityfocus.com/bid/66690
http://www.securitytracker.com/id/1030026
http://www.securitytracker.com/id/1030026
http://www.securitytracker.com/id/1030074
http://www.securitytracker.com/id/1030074
http://www.securitytracker.com/id/1030077
http://www.securitytracker.com/id/1030077
http://www.securitytracker.com/id/1030078
http://www.securitytracker.com/id/1030078
http://www.securitytracker.com/id/1030079
http://www.securitytracker.com/id/1030079
http://www.securitytracker.com/id/1030080
http://www.securitytracker.com/id/1030080
http://www.securitytracker.com/id/1030081
http://www.securitytracker.com/id/1030081
http://www.securitytracker.com/id/1030082
http://www.securitytracker.com/id/1030082
http://www.splunk.com/view/SP-CAAAMB3
http://www.splunk.com/view/SP-CAAAMB3
http://www.symantec.com/security_response/securityupdates/d…
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securi…
http://www.ubuntu.com/usn/USN-2165-1
http://www.ubuntu.com/usn/USN-2165-1
http://www.us-cert.gov/ncas/alerts/TA14-098A
http://www.us-cert.gov/ncas/alerts/TA14-098A
http://www.vmware.com/security/advisories/VMSA-2014-0012.ht…
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
http://www.websense.com/support/article/kbarticle/Vulnerabi…
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-T…
http://advisories.mageia.org/MGASA-2014-0165.html
http://advisories.mageia.org/MGASA-2014-0165.html
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-li…
http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
http://cogentdatahub.com/ReleaseNotes.html
http://cogentdatahub.com/ReleaseNotes.html
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD…
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh…
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f3…
http://heartbleed.com/
http://heartbleed.com/
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.ht…
http://lists.opensuse.org/opensuse-security-announce/2014-0…
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2014-0…
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061…
http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html
http://marc.info/?l=bugtraq&m=139722163017074&w=2
http://marc.info/?l=bugtraq&m=139722163017074&w=2
http://marc.info/?l=bugtraq&m=139757726426985&w=2
http://marc.info/?l=bugtraq&m=139757726426985&w=2
http://marc.info/?l=bugtraq&m=139757819327350&w=2
http://marc.info/?l=bugtraq&m=139757819327350&w=2
http://marc.info/?l=bugtraq&m=139757919027752&w=2
http://marc.info/?l=bugtraq&m=139757919027752&w=2
http://marc.info/?l=bugtraq&m=139758572430452&w=2
http://marc.info/?l=bugtraq&m=139758572430452&w=2
http://marc.info/?l=bugtraq&m=139765756720506&w=2
http://marc.info/?l=bugtraq&m=139765756720506&w=2
http://marc.info/?l=bugtraq&m=139774054614965&w=2
http://marc.info/?l=bugtraq&m=139774054614965&w=2
http://marc.info/?l=bugtraq&m=139774703817488&w=2
http://marc.info/?l=bugtraq&m=139774703817488&w=2
http://marc.info/?l=bugtraq&m=139808058921905&w=2
http://marc.info/?l=bugtraq&m=139808058921905&w=2
http://marc.info/?l=bugtraq&m=139817685517037&w=2
http://marc.info/?l=bugtraq&m=139817685517037&w=2
http://marc.info/?l=bugtraq&m=139817727317190&w=2
http://marc.info/?l=bugtraq&m=139817727317190&w=2
http://marc.info/?l=bugtraq&m=139817782017443&w=2
http://marc.info/?l=bugtraq&m=139817782017443&w=2
http://marc.info/?l=bugtraq&m=139824923705461&w=2
http://marc.info/?l=bugtraq&m=139824923705461&w=2
http://marc.info/?l=bugtraq&m=139824993005633&w=2
http://marc.info/?l=bugtraq&m=139824993005633&w=2
http://marc.info/?l=bugtraq&m=139833395230364&w=2
http://marc.info/?l=bugtraq&m=139833395230364&w=2
http://marc.info/?l=bugtraq&m=139835815211508&w=2
http://marc.info/?l=bugtraq&m=139835815211508&w=2
http://marc.info/?l=bugtraq&m=139835844111589&w=2
http://marc.info/?l=bugtraq&m=139835844111589&w=2
http://marc.info/?l=bugtraq&m=139836085512508&w=2
http://marc.info/?l=bugtraq&m=139836085512508&w=2
http://marc.info/?l=bugtraq&m=139842151128341&w=2
http://marc.info/?l=bugtraq&m=139842151128341&w=2
http://marc.info/?l=bugtraq&m=139843768401936&w=2
http://marc.info/?l=bugtraq&m=139843768401936&w=2
http://marc.info/?l=bugtraq&m=139869720529462&w=2
http://marc.info/?l=bugtraq&m=139869720529462&w=2
http://marc.info/?l=bugtraq&m=139869891830365&w=2
http://marc.info/?l=bugtraq&m=139869891830365&w=2
http://marc.info/?l=bugtraq&m=139889113431619&w=2
http://marc.info/?l=bugtraq&m=139889113431619&w=2
http://marc.info/?l=bugtraq&m=139889295732144&w=2
http://marc.info/?l=bugtraq&m=139889295732144&w=2
http://marc.info/?l=bugtraq&m=139905202427693&w=2
http://marc.info/?l=bugtraq&m=139905202427693&w=2
http://marc.info/?l=bugtraq&m=139905243827825&w=2
http://marc.info/?l=bugtraq&m=139905243827825&w=2
http://marc.info/?l=bugtraq&m=139905295427946&w=2
http://marc.info/?l=bugtraq&m=139905295427946&w=2
http://marc.info/?l=bugtraq&m=139905351928096&w=2
http://marc.info/?l=bugtraq&m=139905351928096&w=2
http://marc.info/?l=bugtraq&m=139905405728262&w=2
http://marc.info/?l=bugtraq&m=139905405728262&w=2
http://marc.info/?l=bugtraq&m=139905458328378&w=2
http://marc.info/?l=bugtraq&m=139905458328378&w=2
http://marc.info/?l=bugtraq&m=139905653828999&w=2
http://marc.info/?l=bugtraq&m=139905653828999&w=2
http://marc.info/?l=bugtraq&m=139905868529690&w=2
http://marc.info/?l=bugtraq&m=139905868529690&w=2
http://marc.info/?l=bugtraq&m=140015787404650&w=2
http://marc.info/?l=bugtraq&m=140015787404650&w=2
http://marc.info/?l=bugtraq&m=140075368411126&w=2
http://marc.info/?l=bugtraq&m=140075368411126&w=2
http://marc.info/?l=bugtraq&m=140724451518351&w=2
http://marc.info/?l=bugtraq&m=140724451518351&w=2
http://marc.info/?l=bugtraq&m=140752315422991&w=2
http://marc.info/?l=bugtraq&m=140752315422991&w=2
http://marc.info/?l=bugtraq&m=141287864628122&w=2
http://marc.info/?l=bugtraq&m=141287864628122&w=2
http://marc.info/?l=bugtraq&m=142660345230545&w=2
http://marc.info/?l=bugtraq&m=142660345230545&w=2
http://public.support.unisys.com/common/public/vulnerabilit…
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp…
http://public.support.unisys.com/common/public/vulnerabilit…
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp…
http://rhn.redhat.com/errata/RHSA-2014-0376.html
http://rhn.redhat.com/errata/RHSA-2014-0376.html
http://rhn.redhat.com/errata/RHSA-2014-0377.html
http://rhn.redhat.com/errata/RHSA-2014-0377.html
http://rhn.redhat.com/errata/RHSA-2014-0378.html
http://rhn.redhat.com/errata/RHSA-2014-0378.html
http://rhn.redhat.com/errata/RHSA-2014-0396.html
http://rhn.redhat.com/errata/RHSA-2014-0396.html
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
https://bugzilla.redhat.com/show_bug.cgi?id=1084875
https://bugzilla.redhat.com/show_bug.cgi?id=1084875
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.…
https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf
https://code.google.com/p/mod-spdy/issues/detail?id=85
https://code.google.com/p/mod-spdy/issues/detail?id=85
http://seclists.org/fulldisclosure/2014/Apr/109
http://seclists.org/fulldisclosure/2014/Apr/109
http://seclists.org/fulldisclosure/2014/Apr/173
http://seclists.org/fulldisclosure/2014/Apr/173
http://seclists.org/fulldisclosure/2014/Apr/190
http://seclists.org/fulldisclosure/2014/Apr/190
http://seclists.org/fulldisclosure/2014/Apr/90
http://seclists.org/fulldisclosure/2014/Apr/90
http://seclists.org/fulldisclosure/2014/Apr/91
http://seclists.org/fulldisclosure/2014/Apr/91
http://seclists.org/fulldisclosure/2014/Dec/23
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/57347
http://secunia.com/advisories/57347
http://secunia.com/advisories/57483
http://secunia.com/advisories/57483
http://secunia.com/advisories/57721
http://secunia.com/advisories/57721
http://secunia.com/advisories/57836
http://secunia.com/advisories/57836
http://secunia.com/advisories/57966
http://secunia.com/advisories/57966
http://secunia.com/advisories/57968
http://secunia.com/advisories/57968
http://secunia.com/advisories/59139
http://secunia.com/advisories/59139
http://secunia.com/advisories/59243
http://secunia.com/advisories/59243
http://secunia.com/advisories/59347
http://secunia.com/advisories/59347
https://filezilla-project.org/versions.php?type=server
https://filezilla-project.org/versions.php?type=server
https://gist.github.com/chapmajs/10473815
https://gist.github.com/chapmajs/10473815
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/p…
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/…
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a…
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade…
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b…
https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b…
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a0…
https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407e…
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3…
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f0…
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-…
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-co…
https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html
https://support.f5.com/kb/en-us/solutions/public/15000/100/…
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html
https://support.f5.com/kb/en-us/solutions/public/15000/100/…
https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=365…
http://support.citrix.com/article/CTX140605
http://support.citrix.com/article/CTX140605
https://www.cert.fi/en/reports/2014/vulnerability788210.html
https://www.cert.fi/en/reports/2014/vulnerability788210.html
https://www.mitel.com/en-ca/support/security-advisories/mit…
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-…
https://yunus-shn.medium.com/ricon-industrial-cellular-rout…
https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack…
http://tools.cisco.com/security/center/content/CiscoSecurit…
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2…
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661
http://www-01.ibm.com/support/docview.wss?uid=swg21670161
http://www-01.ibm.com/support/docview.wss?uid=swg21670161
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_…
http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf
http://www.blackberry.com/btsc/KB35882
http://www.blackberry.com/btsc/KB35882
http://www.debian.org/security/2014/dsa-2896
http://www.debian.org/security/2014/dsa-2896
http://www.exploit-db.com/exploits/32745
http://www.exploit-db.com/exploits/32745
http://www.exploit-db.com/exploits/32764
http://www.exploit-db.com/exploits/32764
http://www.f-secure.com/en/web/labs_global/fsc-2014-1
http://www.f-secure.com/en/web/labs_global/fsc-2014-1
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-…
http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
http://www.getchef.com/blog/2014/04/09/chef-server-heartble…
http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-rel…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-…
http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.…
http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf
http://www.kb.cert.org/vuls/id/720951
http://www.kb.cert.org/vuls/id/720951
http://www.kerio.com/support/kerio-control/release-history
http://www.kerio.com/support/kerio-control/release-history
http://www.mandriva.com/security/advisories?name=MDVSA-2015…
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
http://www.openssl.org/news/secadv_20140407.txt
http://www.openssl.org/news/secadv_20140407.txt
http://www.oracle.com/technetwork/topics/security/cpujul201…
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.oracle.com/technetwork/topics/security/opensslhe…
http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-016…
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/bid/66690
http://www.securityfocus.com/bid/66690
http://www.securitytracker.com/id/1030026
http://www.securitytracker.com/id/1030026
http://www.securitytracker.com/id/1030074
http://www.securitytracker.com/id/1030074
http://www.securitytracker.com/id/1030077
http://www.securitytracker.com/id/1030077
http://www.securitytracker.com/id/1030078
http://www.securitytracker.com/id/1030078
http://www.securitytracker.com/id/1030079
http://www.securitytracker.com/id/1030079
http://www.securitytracker.com/id/1030080
http://www.securitytracker.com/id/1030080
http://www.securitytracker.com/id/1030081
http://www.securitytracker.com/id/1030081
http://www.securitytracker.com/id/1030082
http://www.securitytracker.com/id/1030082
http://www.splunk.com/view/SP-CAAAMB3
http://www.splunk.com/view/SP-CAAAMB3
http://www.symantec.com/security_response/securityupdates/d…
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securi…
http://www.ubuntu.com/usn/USN-2165-1
http://www.ubuntu.com/usn/USN-2165-1
http://www.us-cert.gov/ncas/alerts/TA14-098A
http://www.us-cert.gov/ncas/alerts/TA14-098A
http://www.vmware.com/security/advisories/VMSA-2014-0012.ht…
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
http://www.websense.com/support/article/kbarticle/Vulnerabi…
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-T…