CVE:CVE-2018-5407
CNNVD:CNNVD-201811-279
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade nodejs node.js to a higher version than 6.14.4,8.11.4,10.9.0,and avoid the version (,6.14.4),[8.0.0,8.11.4),[10.0.0,10.9.0); Upgrade openssl openssl to a higher version than 1.0.2q,1.1.0i,and avoid the version [1.0.2,1.0.2q),[1.1.0,1.1.0i); Upgrade tenable nessus to a higher version than 8.1.1,and avoid the version (,8.1.1); Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle application_server to a higher version than 0.9.8,1.0.0,1.0.1,and avoid the version 0.9.8,1.0.0,1.0.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0,and avoid the version 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,and avoid the version 12.3.3; Upgrade oracle mysql_enterprise_backup to a higher version than 3.12.3,4.1.2,and avoid the version (,3.12.3],[3.12.4,4.1.2]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 17.12,8.4,15.1,15.2,16.1,16.2,18.8,and avoid the version [17.7,17.12],8.4,15.1,15.2,16.1,16.2,18.8; Upgrade oracle tuxedo to a higher version than 12.1.1.0.0,and avoid the version 12.1.1.0.0; Upgrade oracle vm_virtualbox to a higher version than 6.0.0,and avoid the version (,6.0.0); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,7.6,and avoid the version 7.0,7.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0