The OpenSSL "heartbleed" vulnerability

The OpenSSL "heartbleed" vulnerability [LWN.net]

This page has extensive information on CVE-2014-0160, an information disclosure vulnerability in OpenSSL otherwise known as the "heartbleed bug." "The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software.