3 ms·
There's a pretty big difference in the amount of memory leaked. Ticketbleed reveals 31 Bytes of uninitialized memory. Heartbleed revealed 64KB.
by strictnein 10y ago
There's a pretty big difference in the amount of memory leaked. Ticketbleed reveals 31 Bytes of uninitialized memory. Heartbleed revealed 64KB.
- baby 10y agoIn the end it doesn't mean that Ticketbleed would reveal a private key more slowly. But since nobody proved that this vuln is exploitable... Heartbleed was proven exploitable thanks to Cloudflare who organized a challenge. (It was also easier to test for exploitability.)