A serious vulnerability in the OpenSSL cryptography library can be exploited to intercept communications. Version 1.0.1g of the software has been released to address the issue. The vulnerability, CVE-2014-0160, can be leveraged to steal information protected by SSL/TLS encryption because it enables an attacker to read the memory of the vulnerable systems. The security hole exposes all data transmissions, including encryption keys, usernames, passwords and the content of the communication. …
Comments are closed.
