CVE:CVE-2012-2110
CNNVD:CNNVD-201204-427
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 0.9.8v之前版本，1.0.0i之前的1.0.0版本和1.0.1a之前的1.0.1版本中的asn1_d2i_read_bio函数中存在漏洞，该漏洞源于未正确解释整数数据。远程攻击者可利用该漏洞借助特制DER数据导致缓冲区溢出攻击，拒绝服务（内存破坏）或造成其他未明影响。此漏洞已被X.509证书或RSA公钥证实。
solution:Upgrade openssl openssl to a higher version than 1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5,1.0.0a,1.0.0b,1.0.0c,1.0.0d,1.0.0e,1.0.0g,0.9.8u,0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s,0.9.8t,1.0.1:beta1,1.0.1:beta2,and avoid the version 1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5,1.0.0a,1.0.0b,1.0.0c,1.0.0d,1.0.0e,1.0.0g,(,0.9.8u],0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s,0.9.8t,1.0.1:beta1,1.0.1:beta2; Upgrade redhat openssl to a higher version than 0.9.6-15,0.9.6b-3,0.9.7a-2,and avoid the version 0.9.6-15,0.9.6b-3,0.9.7a-2