CVE:CVE-2017-3730
CNNVD:CNNVD-201702-270
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.0d之前的1.1.0版本中存在代码问题漏洞。攻击者可利用该漏洞造成客户端崩溃（空指针逆向引用）。
solution:Upgrade openssl openssl to a higher version than 1.1.0,1.1.0a,1.1.0b,1.1.0c,and avoid the version 1.1.0,1.1.0a,1.1.0b,1.1.0c; Upgrade oracle agile_engineering_data_management to a higher version than 6.1.3,6.2.0,and avoid the version 6.1.3,6.2.0; Upgrade oracle communications_application_session_controller to a higher version than 3.7.1,3.8.0,and avoid the version 3.7.1,3.8.0; Upgrade oracle communications_eagle_lnp_application_processor to a higher version than 10.0,10.1,10.2,and avoid the version 10.0,10.1,10.2; Upgrade oracle communications_operations_monitor to a higher version than 3.4,4.0,and avoid the version 3.4,4.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jd_edwards_world_security to a higher version than a9.1,a9.2,a9.3,a9.4,and avoid the version a9.1,a9.2,a9.3,a9.4