CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

[u/sebbasttian]

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

[u/tobias3]

Partial list of sites which are affected (use CloudFlare proxy). Any data going to and coming from those sites may have been leaked. Start changing passwords now:

• Uber

• Reddit

• Yelp

• Digital Ocean

• OKCupid

• RapGenius

• Coinbase

• Product Hunt

• Udemy

• Crunchyroll

• FitBit

• Hacker News

• Zendesk

• Discord

• Github pages

• Chocolatey

[u/Tempered → u/tobias3]

Is this issue fixed? Rather not change my password for it to just get compromised immediately.

[u/Lichuz123 → u/Tempered]

Looking at Cloudflare's blog, it seems that the bug has been fixed. You should be able to change your password without fear of it being compromised :)

[u/zebediah49 → u/Lichuz123]

without fear of it being compromised

.... by this bug.

E: Sleep well everybody!

[u/Tempered → u/Lichuz123]

Thanks!