1. Computers
  2. Display Drivers
  3. Graphics Cards
  4. Memory
  5. Motherboards
  6. Processors
  7. Software
  8. Storage
  9. Operating Systems


Facebook RSS Twitter Twitter Google Plus


Phoronix Test Suite

OpenBenchmarking.org

The OpenSSL Heartbleed Bug Strikes The Internet

Free Software

Published on 07 April 2014 11:21 PM EDT
Written by Michael Larabel in Free Software
15 Comments

As many Phoronix readers have already reported in, a very serious OpenSSL security vulnerability was discovered that allows for attackers to read memory in 64k memory chunks. A very serious bug in OpenSSL 1.0.1/1.0.2-beta is leaking information since the bug's introduction in 2011.

As explained in the OpenSSL.org advisory, "A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64k of memory to a connected client or server."

For security experts and system administrators out there, a ton more information is revealed via the Heartbleed.com web-site setup that covers all of the details for this massive OpenSSL security vulnerability. New versions of OpenSSL have already been released to address this security vulnerability now present in major operating systems.

About The Author
Michael Larabel is the principal author of Phoronix.com and founded the web-site in 2004 with a focus on enriching the Linux hardware experience and being the largest web-site devoted to Linux hardware reviews, particularly for products relevant to Linux gamers and enthusiasts but also commonly reviewing servers/workstations and embedded Linux devices. Michael has written more than 10,000 articles covering the state of Linux hardware support, Linux performance, graphics hardware drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated testing software. He can be followed via and or contacted via .
Latest Articles & Reviews
  1. Kubuntu 15.04 Is Turning Out Quite Nice, Good Way To Try Out The Latest KDE
  2. 5-Way Linux Distribution Comparison On The Core i3 NUC
  3. OCZ ARC 100 Linux SSD Benchmarks
  4. Lenovo ThinkPad X1 Carbon Works Great As A Linux Ultrabook
  5. Transcend SSD370 256GB
  6. Linux 3.19 File-System Tests Of EXT4, Btrfs, XFS & F2FS
Latest Linux News
  1. ALSA 1.0.29 Released
  2. Ubuntu 15.04 Beta Released, Ubuntu MATE Made Official
  3. Coreboot Developer: Purism Doesn't Deliver On Libre Firmware
  4. LLVM 3.6 & Clang 3.6 Deliver More Features, Complete C++14 Support
  5. The Most Popular Open-Source Linux Benchmarks
  6. The Tremendous Features Of Fedora 22
  7. Krita 2.9 Released, Their Biggest Release Ever
  8. RISC OS Now Works With The Raspberry Pi 2
  9. A Single UEFI Executable With The Linux Kernel, Initrd & Command Line
  10. Unigine 2.0 Beta Brings Performance Optimizations, Oculus Rift DK2 Support
Most Viewed News This Week
  1. Linux 4.0-RC1 Tagged, Linux 4.0 Will Bring Many Notable Improvements
  2. Screenshots Of The GNOME 3.16 Changes
  3. Linux 4.0 Doesn't Have The Weirdest Codename
  4. Mir Now Depends Upon C++14
  5. GNOME 3.16 Beta Brings Wayland-Based Log-in Screen
  6. LLVM Clang Compiling The Linux Kernel Is A Big Topic For 2015
  7. Linux BIOS/UEFI Updating Is Going To Get Much Better With UEFI 2.5
  8. Canonical Comes Up With Its Own FUSE Filesystem For Linux Containers
%%CLICK_URL_UNESC%%