topic Re: OpenSSL Heartbleed bug in Security

OpenSSL Heartbleed bug

servere — Wed, 28 May 2014 13:59:22 GMT

Hi,

We have discovered that Splunk 6.0 is vulnerable to OpenSSL Heartbleed bug.

Is there any patch to solve that issue ?

Best regards

Re: OpenSSL Heartbleed bug

lcrielaa — Wed, 28 May 2014 14:11:56 GMT

http://blogs.splunk.com/2014/04/09/splunk-and-the-heartbleed-ssl-vulnerability/

This link should provide all the information you need. It was the first link when I google'd for "Splunk heartbleed bug".

Re: OpenSSL Heartbleed bug

joshd — Wed, 28 May 2014 14:42:41 GMT

....And if you need any help identifying servers vulnerable to the heartbleed bug, check out the Heartbleed Command for Splunk.

Blog post found here: http://discoveredintelligence.ca/heartbleed-command-splunk/

Direct link to Splunk app: http://apps.splunk.com/app/1762/

Re: OpenSSL Heartbleed bug

grijhwani — Wed, 28 May 2014 16:40:08 GMT

A hint for the future: first rule of forum use - search to see if your question has already been answered... This was answered, and fixed comprehensively within days of the original public revelations about Heartbleed.