|
|
Heartbleed status list
This list is intended to fail-safe, for the most part. Absence of evidence is not evidence of absence.
If a test too shows a service to be vulnerable, the service should be listed as "Yes" in the "Vulnerable" column.
The only valid transitions are:
- - (start state) -> Never (response)
- - -> Not now (response)
- - -> Yes (vulnerable interface found)
- Never -> Clueless (evidence of ever having been vulnerable found)
- Not now -> Never (new response)
- Not now -> Clueless (vulnerable interface found)
- Yes -> Not now (response)
- Yes -> Never (response)
Vulnerable
- Yes
- The service has at least one interface which is vulnerable.
- Clueless
- The service has ever had at least one interface which is vulnerable while simultaneously having claimed
not to be vulnerable.
- Not now
- The service has issued a response, claims not to be vulnerable, and no known vulnerable
interfaces exist.
- Never
- The service has issued a response, claims never to have been vulnerable, and no known vulnerable
interfaces exist, or have ever been known to exist.
- -
- No known response from the service, and no known vulnerable interfaces exist.
Related links
|