{"id":23492,"date":"2026-09-16T06:15:06","date_gmt":"2026-09-16T06:15:06","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/mailgun-y-heartbleed\/"},"modified":"2026-09-16T06:15:06","modified_gmt":"2026-09-16T06:15:06","slug":"mailgun-y-heartbleed","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/","title":{"rendered":"Mailgun y Heartbleed"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Se notific\u00f3 el 10 de abril de 2014.<\/strong><\/p>\n\n\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-1656\"><p class=\"h5 m-0\" id=\"toc-title-1656\">\u00cdndice<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#heartbleed\">Heartbleed<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">02<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#mitigacion\">Mitigaci\u00f3n<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">03<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#impacto-en-los-clientes\">Impacto en los clientes<\/a><\/div><\/div><\/nav>\n\n\n<h2 class=\"wp-block-heading\">Heartbleed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A principios de esta semana, recibimos una alerta sobre una vulnerabilidad de seguridad en OpenSSL [<a href=\"http:\/\/heartbleed.com\/\" target=\"_tabs\" rel=\"noopener noreferrer\">1<\/a>] [<a href=\"https:\/\/news.ycombinator.com\/item?id=7548991\" target=\"_tabs\" rel=\"noopener noreferrer\">2<\/a>]. Aunque esta vulnerabilidad no afectaba al c\u00f3digo de Mailgun, Mailgun utiliza la biblioteca OpenSSL para proteger las conexiones HTTPS a nuestros servidores, por lo que tambi\u00e9n est\u00e1bamos expuestos a ella. En la jerga de ciberseguridad, Heartbleed era una vulnerabilidad de lectura arbitraria que permit\u00eda a los atacantes leer 64 kb de memoria del espacio de memoria de los procesos afectados. Lo que hac\u00eda que este error fuera particularmente peligroso era que no dejaba rastro y permit\u00eda a los atacantes acceder a claves privadas, anulando por completo el mecanismo de seguridad TLS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Al enterarnos de la existencia de Heartbleed, analizamos qu\u00e9 partes de nuestra infraestructura eran vulnerables y aplicamos un parche a los servidores afectados. La arquitectura de Mailgun nos permite dar por finalizadas todas las conexiones SSL\/TLS cuando acceden a nuestro centro de datos, por lo que solo tuvimos que aplicar un parche a unos pocos servidores. Este trabajo se complet\u00f3 el martes 8 de abril de 2014 a las 22:00 CET (16:00 ET).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez implementado el parche, tambi\u00e9n actualizamos nuestros certificados para garantizar que, en caso de robo, no se pudieran utilizar nuestras claves privadas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si quieres comprobarlo personalmente, puedes compilar y ejecutar un script llamado Heartbleed o utilizar su aplicaci\u00f3n web para revisar la seguridad de Mailgun, o de cualquier otra p\u00e1gina, frente a la vulnerabilidad Heartbleed [<a href=\"https:\/\/github.com\/FiloSottile\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">3<\/a>] [<a href=\"http:\/\/filippo.io\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">4<\/a>].<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Impacto en los clientes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Dado que esta vulnerabilidad no deja rastro y permit\u00eda a los atacantes leer de forma arbitraria la memoria de nuestros procesos nginx, es posible que tu clave de API y tus credenciales SMTP se hayan visto comprometidas. Aunque la probabilidad de que se haya producido este tipo de ataque es baja, por precauci\u00f3n, recomendamos a todos los clientes que regeneren su clave de API y sus credenciales SMTP (puedes hacerlo desde el \u00abPanel de control\u00bb).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si tienes alguna otra pregunta, no dudes en enviarnos un email a\u00a0<a href=\"mailto:support@mailgun.com\" target=\"_tabs\" rel=\"noopener noreferrer\">support@mailgun.com<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[1]\u00a0<a href=\"http:\/\/heartbleed.com\/\" target=\"_tabs\" rel=\"noopener noreferrer\">http:\/\/heartbleed.com<\/a><br>[2]\u00a0<a href=\"https:\/\/news.ycombinator.com\/item?id=7548991\" target=\"_tabs\" rel=\"noopener noreferrer\">https:\/\/news.ycombinator.com\/item?id=7548991<\/a><br>[3]\u00a0<a href=\"https:\/\/github.com\/FiloSottile\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">https:\/\/github.com\/FiloSottile\/Heartbleed\/<\/a><br>[4]\u00a0<a href=\"http:\/\/filippo.io\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">http:\/\/filippo.io\/Heartbleed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n&#8230;<\/p>\n","protected":false},"author":13,"featured_media":4555,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[22],"class_list":["post-23492","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-product"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/\",\"name\":\"Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"datePublished\":\"2026-09-16T06:15:06+00:00\",\"description\":\"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/product\\\/mailgun-y-heartbleed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Mailgun y Heartbleed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Potentes API de email transaccional que te permiten enviar, recibir y hacer seguimiento de emails, creadas pensando en los desarrolladores. \u00a1Descubre m\u00e1s!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun","description":"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/","og_locale":"es_ES","og_type":"article","og_title":"Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun","og_description":"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...","og_url":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/","url":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/","name":"Mailgun y Heartbleed - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","datePublished":"2026-09-16T06:15:06+00:00","description":"Un resumen de la vulnerabilidad de seguridad Heartbleed en OpenSSL que afect\u00f3 a Mailgun en 2014. M\u00e1s informaci\u00f3n...","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/es\/blog\/product\/mailgun-y-heartbleed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/es\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/es\/blog\/"},{"@type":"ListItem","position":3,"name":"Mailgun y Heartbleed"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/es\/#website","url":"https:\/\/www.mailgun.com\/es\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Potentes API de email transaccional que te permiten enviar, recibir y hacer seguimiento de emails, creadas pensando en los desarrolladores. \u00a1Descubre m\u00e1s!","publisher":{"@id":"https:\/\/www.mailgun.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/es\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.mailgun.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/es\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog\/23492","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/users\/13"}],"version-history":[{"count":0,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog\/23492\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/media\/4555"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/media?parent=23492"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/es\/wp-json\/wp\/v2\/blog_category?post=23492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}