SSL Heartbleed bug

Post Reply
moetsch
Posts: 1
Joined: Tue Jun 28, 2011 4:11 pm

SSL Heartbleed bug

Post by moetsch »

Are UE users affected?
alex
Posts: 4514
Joined: Thu Feb 27, 2003 5:57 pm

Re: SSL Heartbleed bug

Post by alex »

No.

According to the OpenSSL website advisory the buggy OpenSSL versions are only v1.0.1 and v1.0.2, UE uses a different version which is not affected.

Also UE doesn't mask memory access violations (it would compromise reliability), so if something tries to read random block of the process memory (it is what the SSL bug is about) it will just crash.
Post Reply