Skip to Main Content

Cloudflare Leak

Earlier this week, Cloudflare reported a recent bug involving their cloud edge servers.

The bug allowed Cloudflare's servers to leak private contents in memory, including authentication tokens, cookies, and the contents of HTTP POST requests.

Cloudflare estimates that at the period of highest impact, about 0.00003% of HTTP requests through the managed cloud service could have resulted in memory leakage.

Cloudflare has confirmed that private SSL keys were not exposed as part of this bug, has since disabled the specific features within their service that were susceptible to this bug.
 
You can read more information about this bug on Cloudflare's Incident Report.