CVE:CVE-2022-2097
CNNVD:CNNVD-202207-379
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL存在安全漏洞，该漏洞源于不会加密全部数据，从而导致 16 个字节的明文泄露。
solution:Upgrade openssl openssl to a higher version than 1.1.1q,3.0.5,and avoid the version [1.1.1,1.1.1q),[3.0.0,3.0.5); Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,1.0:sp2,and avoid the version (,1.0),1.0,1.0:sp1,1.0:sp2; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0