There have been remote code execution vulnerabilities in OpenSSL in the past, yet no one panicked. Those vulnerabilities gave you what heartbleed does and more.

There have been remote code execution vulnerabilities in OpenSSL in the past, yet no one panicked. Those vulnerabilities gave you what heartbleed does and more. The worst part about heartbleed is that its easy to exploit and the tools to do it are readily available. Its bad, as I state, but not the end of the world. The main point of the post was to correct the public analysis of the freelist implementation. Please don't mistake a poor attempt at humor for ego.