Verified90% confidenceFactTime unknown
The 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.
7
Sources
90%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
Unverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据81% similarUnverifiedThe Heartbleed vulnerability lay dormant in the OpenSSL codebase for approximately two years, while the GHOST vulnerability (CVE-2015-0235) in glibc lay dormant for approximately 14 years.79% similarVerifiedThe 2014 Heartbleed vulnerability (CVE-2014-0160) originated from a buffer over-read error in OpenSSL's TLS heartbeat extension implementation, allowing attackers to read up to 64 KB of server memory per request.75% similarVerifiedThe Heartbleed vulnerability existed in the OpenSSL codebase for more than two years before being discovered, directly leading to the establishment of the Core Infrastructure Initiative (CII, later evolved into OpenSSF).73% similarUnverified2006年被发现的OpenSSL整数溢出漏洞在代码库中潜伏多年，直到安全研究人员专项审计才曝光72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/19879API
curl https://kongchang.com/api/v1/knowledge/claims/19879MCP
get_claim(id=19879)