Which of the following is a serious vulnerability in the popular OpenSSL cryptographic software library? This weakness allows stealing the information protected, under normal conditions, by the SSL/TL

The SSL/TLS Renegotiation Vulnerability (CVE-2009-3555) is a different OpenSSL flaw that allows attackers to inject plaintext into renegotiated sessions, not steal memory contents.

Shellshock is a vulnerability in the GNU Bash shell that allows arbitrary command execution via crafted environment variables, and is unrelated to the OpenSSL library.

The Heartbleed Bug (CVE-2014-0160) is a flaw in OpenSSL's implementation of the TLS/DTLS heartbeat extension. A malformed heartbeat request could trick a vulnerable server into returning up to 64KB of its own memory, exposing private keys, session tokens, passwords, and other protected data without any authentication required.

POODLE (Padding Oracle On Downgraded Legacy Encryption) targets the SSL 3.0 protocol's CBC padding scheme and is not a flaw within the OpenSSL library's heartbeat implementation.