Heartbleed (CVE-2014-0160)

E792089

OpenSSL vulnerability information disclosure vulnerability security bug software vulnerability

Heartbleed (CVE-2014-0160) is a critical security bug in the OpenSSL cryptographic library that allowed attackers to read sensitive data from the memory of affected servers, compromising encryption keys, passwords, and other private information.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
CVE-2014-0160	1
Heartbleed	1
Heartbleed (CVE-2014-0160) canonical	1
OpenSSL Heartbleed bug	1

How this entity was disambiguated

This entity first appeared as the object of triple T9312266 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Heartbleed (CVE-2014-0160)
Context triple: [OpenSSL, notableVulnerability, Heartbleed (CVE-2014-0160)]

A. Meltdown
"Meltdown" is a pop song by Irish singer-songwriter Niall Horan, released as one of the key singles from his solo music career.
B. POODLE attack
The POODLE attack is a cryptographic vulnerability that exploits weaknesses in SSL 3.0’s CBC mode to decrypt secure HTTPS communications.
C. CVE (Common Vulnerabilities and Exposures) entries
CVE (Common Vulnerabilities and Exposures) entries are standardized identifiers for publicly known cybersecurity vulnerabilities, used worldwide to consistently reference and track security issues across software and systems.
D. The DAO hack
The DAO hack was a 2016 exploit of a major Ethereum-based investment fund smart contract that led to the theft of millions of ether and ultimately prompted a controversial hard fork of the Ethereum blockchain.
E. ILOVEYOU worm
The ILOVEYOU worm was a notorious early-2000s email-borne computer worm that rapidly spread worldwide, causing massive damage by overwriting files and exploiting users’ trust with a deceptive love-letter subject line.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Heartbleed (CVE-2014-0160)
Target entity description: Heartbleed (CVE-2014-0160) is a critical security bug in the OpenSSL cryptographic library that allowed attackers to read sensitive data from the memory of affected servers, compromising encryption keys, passwords, and other private information.

A. Meltdown
"Meltdown" is a pop song by Irish singer-songwriter Niall Horan, released as one of the key singles from his solo music career.
B. POODLE attack
The POODLE attack is a cryptographic vulnerability that exploits weaknesses in SSL 3.0’s CBC mode to decrypt secure HTTPS communications.
C. CVE (Common Vulnerabilities and Exposures) entries
CVE (Common Vulnerabilities and Exposures) entries are standardized identifiers for publicly known cybersecurity vulnerabilities, used worldwide to consistently reference and track security issues across software and systems.
D. The DAO hack
The DAO hack was a 2016 exploit of a major Ethereum-based investment fund smart contract that led to the theft of millions of ether and ultimately prompted a controversial hard fork of the Ethereum blockchain.
E. ILOVEYOU worm
The ILOVEYOU worm was a notorious early-2000s email-borne computer worm that rapidly spread worldwide, causing massive damage by overwriting files and exploiting users’ trust with a deceptive love-letter subject line.
F. None of above. chosen

Statements (53)

Predicate	Object
instanceOf	OpenSSL vulnerability ⓘ information disclosure vulnerability ⓘ security bug ⓘ software vulnerability ⓘ
affectedRange	OpenSSL 1.0.1 through 1.0.1f ⓘ linked to: OpenSSL OpenSSL 1.0.2-beta1 ⓘ linked to: OpenSSL
affectsComponent	OpenSSL TLS/DTLS implementation ⓘ linked to: OpenSSL
affectsProtocol	DTLS ⓘ TLS ⓘ
affectsSoftware	OpenSSL ⓘ
allows	disclosure of other sensitive data ⓘ disclosure of passwords ⓘ disclosure of private keys ⓘ disclosure of session cookies ⓘ reading process memory of affected client ⓘ reading process memory of affected server ⓘ
attackComplexity	low ⓘ
attackPrerequisite	use of vulnerable OpenSSL version ⓘ
attackVector	crafted TLS heartbeat request ⓘ
CVEID	CVE-2014-0160 ⓘ
CVSSv2BaseScore	5.0 ⓘ
CVSSv2ExploitabilitySubscore	10.0 ⓘ
CVSSv2ImpactSubscore	2.9 ⓘ
CWEID	CWE-125 ⓘ linked to: CWE
CWEName	Out-of-bounds Read ⓘ
dateDisclosed	2014-04-07 ⓘ
datePubliclyReported	2014-04-07 ⓘ
discoveredBy	Codenomicon security team ⓘ Neel Mehta ⓘ
discoveredByOrganization	Codenomicon ⓘ Google Security Team ⓘ linked to: Google security teams
exploitation	remote ⓘ
fixedBy	disabling TLS heartbeat extension ⓘ
fixedInVersion	OpenSSL 1.0.1g ⓘ linked to: OpenSSL
hasLogo	bleeding heart logo ⓘ
hasNameOrigin	named by Codenomicon ⓘ
impacts	VPN servers ⓘ confidentiality ⓘ email servers ⓘ embedded devices using OpenSSL ⓘ encryption keys ⓘ user credentials ⓘ web servers ⓘ
introducedInVersion	OpenSSL 1.0.1 ⓘ linked to: OpenSSL OpenSSL 1.0.1-beta1 ⓘ linked to: OpenSSL OpenSSL 1.0.2-beta1 ⓘ linked to: OpenSSL
notableConsequence	necessitated mass revocation and reissue of TLS certificates ⓘ prompted large-scale password resets on many websites ⓘ
requiresAuthentication	false ⓘ
standardIdentifier	CVE-2014-0160 ⓘ linked to: Heartbleed (CVE-2014-0160)
vulnerabilityType	bounds-checking error ⓘ buffer over-read ⓘ input validation error ⓘ