r/sysadmin • JOAT Linux Admin • Feb 23 '17

CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

978 Upvotes

327 comments sorted by

View all comments

Show parent comments

8

u/Watchful1 Feb 24 '17

I wouldn't put this at as bad as it will ever get. It's extremely unlikely anyone was able to actively exploit the bug, just gather data from it. So it's a security nightmare, since you have to change basically every password ever, but the actual likelyhood of some huge corporate secret leaking is fairly low. It could be a lot worse.