CVE:CVE-2021-23839
CNNVD:CNNVD-202102-1230
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.0.2 存在加密问题漏洞，该漏洞源于在解除填充RSA签名时，将对版本回滚攻击进行检查。
solution:Upgrade openssl openssl to a higher version than 1.0.2x,and avoid the version [1.0.2s,1.0.2x]; Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle enterprise_manager_for_storage_management to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle graalvm to a higher version than 19.3.5,20.3.1.2,21.0.0.2,and avoid the version 19.3.5,20.3.1.2,21.0.0.2; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,and avoid the version (,1.0),1.0,1.0:sp1