Unverified70% confidenceFactExact time
The Heartbleed vulnerability lay dormant in the OpenSSL codebase for approximately two years, while the GHOST vulnerability (CVE-2015-0235) in glibc lay dormant for approximately 14 years.
2
Sources
70%
Confidence
Long-term
Relevance
7/5/2026
First Seen
Sources
Related Claims
Unverifiedglibc的GHOST漏洞（CVE-2015-0235）潜伏了约14年80% similarVerifiedThe 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.79% similarUnverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据74% similarUnverifiedThe Heartbleed vulnerability in OpenSSL and the Log4Shell vulnerability in Log4j exposed systemic issues of insufficient maintenance resources for critical open-source projects.74% similarVerifiedThe Heartbleed vulnerability existed in the OpenSSL codebase for more than two years before being discovered, directly leading to the establishment of the Core Infrastructure Initiative (CII, later evolved into OpenSSF).73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112591API
curl https://kongchang.com/api/v1/knowledge/claims/112591MCP
get_claim(id=112591)