Top 10 winner

Heartbleed

Codenomicon Ltd. http://www.codenomicon.com/ · heartbleed.com

A missing bounds check in OpenSSL's TLS heartbeat extension lets any peer ask for more bytes than it supplied and receive up to 64KB of adjacent process memory, repeatable without limit. It leaks private keys, user credentials, session cookies and plaintext traffic, and leaves no trace in server logs.

Record

Researcher

Codenomicon Ltd. http://www.codenomicon.com/

Published by

heartbleed.com

In the archive

• Ranked #1 in the 2014 Top 10 Web Hacking Techniques

Tags

• info-leak
• tls
• https
• cve
• vendor-advisory
• mitigation
• detection
• owasp-a02-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Codenomicon Ltd. http://www.codenomicon.com/, first published at the original source. Preserved copies are kept so the citation survives its host.