Unverified50% confidenceFactExact time
2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据
1
Sources
50%
Confidence
Long-term
Relevance
7/21/2026
First Seen
Sources
Related Claims
VerifiedThe 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.81% similarUnverifiedThe Heartbleed vulnerability of 2014 revealed that a project relied upon by the global internet, such as OpenSSL, was being maintained by only two part-time maintainers.74% similarUnverifiedThe Heartbleed vulnerability lay dormant in the OpenSSL codebase for approximately two years, while the GHOST vulnerability (CVE-2015-0235) in glibc lay dormant for approximately 14 years.74% similarUnverifiedOpenSSL Heartbleed 漏洞是由 C 语言手动内存管理失误所致74% similarUnverified2006年被发现的OpenSSL整数溢出漏洞在代码库中潜伏多年，直到安全研究人员专项审计才曝光68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/582146API
curl https://kongchang.com/api/v1/knowledge/claims/582146MCP
get_claim(id=582146)