Heartbleed

(redirected from Heartbleed)

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1both.c and t1lib.c, aka the Heartbleed bug. Heartbleed was caused by a flaw in OpenSSL, an open source code library that implemented the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. In short, a malicious user. Although it's slow and tiny, the Rio impresses given its low pricing. It feels well-built and refined, more so than is expected from cars in this category. Critically the Rio doesn’t feel cheap.


Also found in: Encyclopedia.
Related to Heartbleed: Shellshock, OpenSSL

SSL

abbreviation for
(Computer Science) Secure Sockets Layer: a way of enabling the secure encrypted transmission of sensitive data via the internet
Collins English Dictionary – Complete and Unabridged, 12th Edition 2014 © HarperCollins Publishers 1991, 1994, 1998, 2000, 2003, 2006, 2007, 2009, 2011, 2014

Want to thank TFD for its existence? Tell a friend about us, add a link to this page, or visit the webmaster's page for free fun content.
Link to this page:

Heartbleed Bug

Heartbleed

Heartbleed Bug

How the Heartbleed Bug Works:[[Meg stands by a server. There's a thought bubble arising from the server showing the data the server is currently processing, including a portion that states 'User Meg wants these six letters: POTATO.']]Meg: Server, are you still there? If so, reply 'POTATO' (6 letters).[[The 6 letters 'POTATO' are highlighted yellow in the server's thought bubble, and the server emits 'POTATO'.]][[The phrase 'User Meg wants these 4 letters: BIRD.' is in the server's thought bubble with other data around it, with 'BIRD' highlighted. The server is emitting 'BIRD'.]]Meg: Hmm...[[The phrase 'User meg wants these 500 letters: HAT.' is in the server's thought bubble, along with other data around it.]]Meg: Server, are you still there? IF so, reply 'HAT' (500 letters).[['HAT' and many more characters after it in the thought bubble are highlighted, and the server emits a long string of text starting with 'HAT' but then including much more other unrelated data. Meg is busily writing it down in a notebook.]]{{Title text: Are you still there, server? It's me, Margaret.}}