Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with heartbleed
Search options answers only
not deleted
user 655
A highly critical vulnerability in the OpenSSL library which allows an attacker to obtain random 64kByte blocks of memory from the process using said library, which could include user credentials, private SSL keys, and other data sent/received from the server.
11
votes
Accepted
Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
connector
Uses OpenSSL for TLS/SSL capabilities (if supported by linked APR library)
Therefore, it would be reasonable to assume that the Tomcat Native Library would be vulnerable to the Heartbleed … Thus, the heartbleed buffer overrun is unlikely to reveal any secret information which exists as Java-based object. …
- 329k
3
votes
Accepted
Does "heartbeat extension disabled" mean that the site was previously vulnerable?
No. "Disabled" means here that the client announced support of the heartbeat extension, and the server failed to respond with "hey, I know that one too ! Let's heartbeat together !".
This term does n …
- 329k
12
votes
Accepted
What are the side effects of recompiling OpenSSL with -DOPENSSL_NO_HEARTBEATS?
If you compilte OpenSSL with -DOPENSSL_NO_HEARTBEATS then you get an OpenSSL library and tools which can do anything that "normal" OpenSSL can do, except for the support of the SSL/TLS extension calle …
- 329k
20
votes
Would the Heartbleed bug have been prevented if OpenSSL was written in Go/D/Vala?
The recent "heartbleed" is not qualitatively new thing; OpenSSL already has had quite a few of buffer overflow-related bugs over the years (a number of which coming from the ASN.1 handling code, for certificate …
- 329k
37
votes
Heartbleed: Why does the client supply the length of the message at all?
And that's exactly what occurred with the "heartbleed" bug: a step was forgotten, which can have dire consequences. …
- 329k
1
vote
SSL cert minimize downtime key rotation strategy
Let's assume, for an instant, that you really need to "re-key your Web servers" because of the heartbleed bug (if there is such a need, then you quite logically also need to do it for every other similar …
- 329k