HeartBleed Attack

Heart bleed is an issue with OpenSSL (Encryption software that helps to make secure communication on web). It is associated with servers. So, end user wont be able to resolve it
Issue : SSL standard includes heartbeat option to send a shaort message to end computer to check if the system in online.
Attacker can send malicious heartbeat message, making end computer send sentive data (like sharing contents in RAM).
If server private key is captured, attacker can sniff all data being send to server

Issue with OpenSSL - The openssl developers made one critical error when implementing heartbeat messages. They fully trusted the length sent in the request

What information can you get with a Heartbleed attack?

The Heartbleed attack works by tricking servers into leaking information stored in their memory. So any information handled by web servers is potentially vulnerable.