CVE:CVE-2020-1968
CNNVD:CNNVD-202009-585
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 中存在加密问题漏洞。该漏洞源于DH Pre-master Secret Raccoon。攻击者可利用该漏洞绕过数据访问限制，获取敏感信息。
solution:Upgrade openssl openssl to a higher version than 1.0.2v,and avoid the version [1.0.2,1.0.2v]; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,and avoid the version 16.04,18.04; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade oracle ethernet_switch_es2-64_firmware to a higher version than 2.0.0.14,and avoid the version 2.0.0.14; Upgrade oracle ethernet_switch_es2-72_firmware to a higher version than 2.0.0.14,and avoid the version 2.0.0.14; Upgrade fujitsu m10-1_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade fujitsu m10-4_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade fujitsu m10-4s_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade fujitsu m12-1_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade fujitsu m12-2_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade fujitsu m12-2s_firmware to a higher version than xcp2400,xcp3100,and avoid the version (,xcp2400),(,xcp3100); Upgrade oracle ethernet_switch_es1-24_firmware to a higher version than 1.3.1,and avoid the version 1.3.1; Upgrade oracle ethernet_switch_tor-72_firmware to a higher version than 1.2.2,and avoid the version 1.2.2