CVE:CVE-2019-1559
CNNVD:CNNVD-201902-956
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.0.2至1.0.2q版本中存在信息泄露漏洞。攻击者可利用该漏洞绕过访问限制，获取敏感信息。
solution:Upgrade openssl openssl to a higher version than 1.0.2r,and avoid the version [1.0.2,1.0.2r); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp active_iq_unified_manager to a higher version than -,and avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp altavault to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp hyper_converged_infrastructure to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_unified_manager to a higher version than -; Upgrade netapp oncommand_unified_manager_core_package to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp ontap_select_deploy to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp service_processor to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapdrive to a higher version than -; Upgrade netapp snapprotect to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade netapp storagegrid to a higher version than 9.0.4,-,and avoid the version [9.0.0,9.0.4]; Upgrade netapp hci_compute_node to a higher version than -; Upgrade f5 big-ip_access_policy_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_analytics to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_application_security_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_domain_name_system to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_edge_gateway to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_fraud_protection_service to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_global_traffic_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_link_controller to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_local_traffic_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-ip_webaccelerator to a higher version than 12.1.5,13.1.3,14.1.2,15.1.0,and avoid the version [12.1.0,12.1.5],[13.0.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.1.0]; Upgrade f5 big-iq_centralized_management to a higher version than 6.1.0,7.1.0,and avoid the version [6.0.0,6.1.0],[7.0.0,7.1.0]; Upgrade f5 traffix_signaling_delivery_controller to a higher version than 5.1.0,4.4.0,and avoid the version [5.0.0,5.1.0],4.4.0; Upgrade tenable nessus to a higher version than 8.2.3,and avoid the version (,8.2.3]; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade netapp cn1610_firmware to a higher version than -; Upgrade netapp a320_firmware to a higher version than -; Upgrade netapp c190_firmware to a higher version than -; Upgrade netapp a220_firmware to a higher version than -; Upgrade netapp fas2720_firmware to a higher version than -; Upgrade netapp fas2750_firmware to a higher version than -; Upgrade netapp a800_firmware to a higher version than -; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade mcafee agent to a higher version than 5.6.4,and avoid the version [5.6.0,5.6.4]; Upgrade mcafee data_exchange_layer to a higher version than 6.0.0,and avoid the version [4.0.0,6.0.0); Upgrade mcafee threat_intelligence_exchange_server to a higher version than 3.0.0,and avoid the version [2.0.0,3.0.0); Upgrade mcafee web_gateway to a higher version than 9.0.0,and avoid the version [7.0.0,9.0.0); Upgrade redhat jboss_enterprise_web_server to a higher version than 5.0.0,and avoid the version 5.0.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle business_intelligence to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.0.0,8.1,8.2,8.3,8.4,and avoid the version 8.0.0,8.1,8.2,8.3,8.4; Upgrade oracle communications_performance_intelligence_center to a higher version than 10.4.0.2,and avoid the version 10.4.0.2; Upgrade oracle communications_session_border_controller to a higher version than 7.4,8.0.0,8.1.0,8.2,8.3,and avoid the version 7.4,8.0.0,8.1.0,8.2,8.3; Upgrade oracle communications_session_router to a higher version than 7.4,8.0,8.1,8.2,8.3,and avoid the version 7.4,8.0,8.1,8.2,8.3; Upgrade oracle communications_unified_session_manager to a higher version than 7.3.5,8.2.5,and avoid the version 7.3.5,8.2.5; Upgrade oracle endeca_server to a higher version than 7.7.0,and avoid the version 7.7.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0,and avoid the version 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,12.4.0,and avoid the version 12.3.3,12.4.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jd_edwards_world_security to a higher version than a9.3,a9.3.1,a9.4,and avoid the version a9.3,a9.3.1,a9.4; Upgrade oracle mysql to a higher version than 5.6.43,5.7.25,8.0.15,and avoid the version [5.6.0,5.6.43],[5.7.0,5.7.25],[8.0.0,8.0.15]; Upgrade oracle mysql_enterprise_monitor to a higher version than 4.0.8,8.0.14,and avoid the version (,4.0.8],[8.0.0,8.0.14]; Upgrade oracle mysql_workbench to a higher version than 8.0.16,and avoid the version (,8.0.16]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle secure_global_desktop to a higher version than 5.4,and avoid the version 5.4; Upgrade oracle services_tools_bundle to a higher version than 19.2,and avoid the version 19.2; Upgrade paloaltonetworks pan-os to a higher version than 7.1.15,8.0.20,8.1.8,9.0.2,and avoid the version [7.1.0,7.1.15),[8.0.0,8.0.20),[8.1.0,8.1.8),[9.0.0,9.0.2); Upgrade nodejs node.js to a higher version than 6.8.1,6.17.0,8.8.1,8.15.1,and avoid the version [6.0.0,6.8.1],[6.9.0,6.17.0),[8.0.0,8.8.1],[8.9.0,8.15.1)