CVE-2014-0160

[Leif Thuresson]

Just want to check that I got it right about which applications are 
vulnerable.
It is called "TLS heartbeat" but it looks like this part of the packet 
parsing code is common to
both SSLv3 and TLS so although an application is using the 
SSLv3_server_method/SSLv3_client_method
it it is still vulnerable to the "TLS heartbeat attack" right?
/Leif