The vulnerability, known as HeartBleed, is a couple of lines of code that were added about two in a half years ago by a developer working on the OpenSSL project.