Description
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 25 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.