AWS-2014-004 — Vulnetix

AWS-2014-004 PUBLISHED

April 08, 2014 Elastic Load Balancing: We can confirm that all load balancers affected by the issue described in CVE-2014-0160 have now been updated in all Regions. If you are terminating your SSL connections on your Elastic Load Balancer, you are no longer vulnerable to the Heartbleed bug. As an added precaution, we recommend that you rotate your SSL certificates using the information provided in the Elastic Load Balancing documentation: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_UpdatingLoadBalancerSSL.html

Timeline

Apr 9, 2014 PoC Published
Oct 9, 2019 CVE Published
Apr 11, 2025 PoC Published

References

Heartbleed Bug Update advisory
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_UpdatingLoadBalancerSSL.html web

Open in Interactive Console →