""ET EXPLOIT Malformed HeartBeat Response""

SID: 2018373

Revision: 5

Class Type: bad-unknown

Metadata: created_at 2014_04_08, cve CVE_2014_0160, updated_at 2020_05_22

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: [!$HTTP_PORTS,!445,!22]

Destination Network: any

Destination Port: any

Flow: established,from_server

Contents:

  • Value: "|18 03|" Depth: 2

Within:

PCRE:

Special Options:

source