CVE:CVE-2021-23841
CNNVD:CNNVD-202102-1200
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL public API 存在代码问题漏洞，该漏洞源于 X509_issuer_and_serial_hash 函数不能正确处理解析 issuer 字段时可能发生的任何错误。
solution:Upgrade openssl openssl to a higher version than 1.0.2y,1.1.1j,and avoid the version [1.0.2,1.0.2y),[1.1.1,1.1.1j); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade tenable nessus_network_monitor to a higher version than 5.11.0,5.11.1,5.12.0,5.12.1,5.13.0,and avoid the version 5.11.0,5.11.1,5.12.0,5.12.1,5.13.0; Upgrade tenable tenable.sc to a higher version than 5.17.0,and avoid the version [5.13.0,5.17.0]; Upgrade apple safari to a higher version than 14.1.1,and avoid the version (,14.1.1); Upgrade apple ipados to a higher version than 14.6,and avoid the version (,14.6); Upgrade apple iphone_os to a higher version than 14.6,and avoid the version (,14.6); Upgrade apple macos to a higher version than 11.4,and avoid the version [11.1,11.4); Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle enterprise_manager_for_storage_management to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle essbase to a higher version than 21.2,and avoid the version 21.2; Upgrade oracle graalvm to a higher version than 19.3.5,20.3.1.2,21.0.0.2,and avoid the version 19.3.5,20.3.1.2,21.0.0.2; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.23,and avoid the version (,8.0.23); Upgrade oracle mysql_server to a higher version than 5.7.33,8.0.23,and avoid the version (,5.7.33),[8.0.15,8.0.23); Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,and avoid the version (,1.0),1.0,1.0:sp1