Apple Fixes Heartbleed Bug in AirPort Extreme and Time Capsule

Back in early April Apple had told us its key web-based services aren't affected by the Heartbleed security vulnerability, but it forgot to mention that some of its hardware — namely, the 2013 AirPort Extreme and Time Capsule — are vulnerable

Now, the company has released a firmware update that fixes the issue for both products.

Apple describes the bug as follows:

"An out-of-bounds read issue existed in the OpenSSL library when handling TLS heartbeat extension packets. An attacker in a privileged network position could obtain information from process memory. This issue was addressed through additional bounds checking. Only AirPort Extreme and AirPort Time Capsule base stations with 802.11ac are affected, and only if they have Back to My Mac or Send Diagnostics enabled. Other AirPort base stations are not impacted by this issue." Read more...