top of page

Support Group

Public·12 members

Parker Lopez
Parker Lopez

(238) Leaked Private Cloud Logs - 1.zip



For the avoidance of doubt, Cloudflare customer SSL private keys were not leaked. Cloudflare has always terminated SSL connections through an isolated instance of NGINX that was not affected by this bug.




(238) Leaked private cloud logs - 1.zip



The bug was serious because the leaked memory could contain private information and because it had been cached by search engines. We have also not discovered any evidence of malicious exploits of the bug or other reports of its existence.


Every log line indicates an HTTP request that could have leaked private memory. By logging how often the problem was occurring we hoped to get an estimate of the number of times HTTP request had leaked memory while the bug was present.


Cloudflare runs multiple separate processes on the edge machines and these provide process and memory isolation. The memory being leaked was from a process based on NGINX that does HTTP handling. It has a separate heap from processes doing SSL, image re-compression, and caching, which meant that we were quickly able to determine that SSL private keys belonging to our customers could not have been leaked.


However, the memory space being leaked did still contain sensitive information. One obvious piece of information that had leaked was a private key used to secure connections between Cloudflare machines. 041b061a72


About

Welcome to the group! You can connect with other members, ge...

Members

  • Luke James
    Luke James
  • Jimena Galván
    Jimena Galván
  • Chris Roman
    Chris Roman
  • Bruno Hunchback
    Bruno Hunchback
  • Lalo Puma
    Lalo Puma
bottom of page