javascript - Is CryptoJS vulnerable to the OpenSSL Heartbleed bug? -
we using cryptojs in our application. since cryptojs uses openssl, vulnerable heartbleed bug? if yes, can prevent it?
since 'crypto.js' uses open ssl ,are vulnerable heartbleeding attack?
the heartbleed
attack connected "handling of transport layer security (tls) heartbeat extension".
so, heartbleed attack possible if crypto.js
has tls / ssl server or client; , using tls / ssl server or client.
if don't use tls it, (or if library has no tls/ssl client looks - can't find tls in sources) - not vulnerable heartbleed
.
if yes,what can prevent it?
update system's openssl library; check servers , clients connecting heartbleed vulnerability.
Comments
Post a Comment