CVE:CVE-2020-1971
CNNVD:CNNVD-202012-579
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.1版本和1.0.2版本存在代码问题漏洞，该漏洞源于空指针解引用和崩溃可能会导致拒绝服务攻击。
solution:Upgrade openssl openssl to a higher version than 1.0.2x,1.1.1i,and avoid the version [1.0.2,1.0.2x),[1.1.1,1.1.1i); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.1.0,8.2.3,and avoid the version [8.0.0,8.1.0],[8.2.0,8.2.3]; Upgrade oracle communications_session_border_controller to a higher version than cz8.2,cz8.3,cz8.4,and avoid the version cz8.2,cz8.3,cz8.4; Upgrade oracle communications_session_router to a higher version than cz8.2,cz8.3,cz8.4,and avoid the version cz8.2,cz8.3,cz8.4; Upgrade oracle communications_subscriber-aware_load_balancer to a higher version than cz8.2,cz8.3,cz8.4,and avoid the version cz8.2,cz8.3,cz8.4; Upgrade oracle communications_unified_session_manager to a higher version than scz8.2.5,and avoid the version scz8.2.5; Upgrade oracle enterprise_communications_broker to a higher version than pcz3.1,pcz3.2,pcz3.3,and avoid the version pcz3.1,pcz3.2,pcz3.3; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.3.0.0,13.4.0.0,and avoid the version 13.3.0.0,13.4.0.0; Upgrade oracle enterprise_manager_for_storage_management to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle enterprise_session_border_controller to a higher version than cz8.2,cz8.3,cz8.4,and avoid the version cz8.2,cz8.3,cz8.4; Upgrade oracle essbase to a higher version than 21.2,and avoid the version 21.2; Upgrade oracle graalvm to a higher version than 19.3.4,20.3.0,and avoid the version 19.3.4,20.3.0; Upgrade oracle http_server to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3); Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle mysql to a higher version than 8.0.22,and avoid the version (,8.0.22]; Upgrade oracle mysql_server to a higher version than 5.7.32,8.0.22,and avoid the version (,5.7.32],[8.0.15,8.0.22]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp data_ontap to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.60.3,and avoid the version [11.0.0,11.60.3]; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp manageability_software_development_kit to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp plug-in_for_symantec_netbackup to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -; Upgrade netapp ef600a_firmware to a higher version than -; Upgrade netapp aff_a250_firmware to a higher version than -; Upgrade tenable log_correlation_engine to a higher version than 6.0.9,and avoid the version (,6.0.9); Upgrade tenable nessus_network_monitor to a higher version than 5.13.1,and avoid the version (,5.13.1); Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade nodejs node.js to a higher version than 10.12.0,10.23.1,12.12.0,12.20.1,14.14.0,14.15.4,15.5.0,and avoid the version [10.0.0,10.12.0],[10.13.0,10.23.1),[12.0.0,12.12.0],[12.13.0,12.20.1),[14.0.0,14.14.0],[14.15.0,14.15.4),[15.0.0,15.5.0)