CVE:CVE-2014-0076
CNNVD:CNNVD-201403-434
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.0.0l及之前版本中的Montgomery ladder实现过程中存在安全漏洞，该漏洞源于Elliptic Curve Digital Signature Algorithm (ECDSA)中存在错误。远程攻击者可通过FLUSH+RELOAD Cache旁道攻击利用该漏洞获取ECDSA随机数值。
solution:Upgrade openssl openssl to a higher version than 1.0.0l,0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s,0.9.8t,0.9.8u,0.9.8v,0.9.8w,0.9.8x,0.9.8y,1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5,1.0.0a,1.0.0b,1.0.0c,1.0.0d,1.0.0e,1.0.0f,1.0.0g,1.0.0h,1.0.0i,1.0.0j,1.0.0k,and avoid the version (,1.0.0l],0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s,0.9.8t,0.9.8u,0.9.8v,0.9.8w,0.9.8x,0.9.8y,1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5,1.0.0a,1.0.0b,1.0.0c,1.0.0d,1.0.0e,1.0.0f,1.0.0g,1.0.0h,1.0.0i,1.0.0j,1.0.0k