CVE:CVE-2014-0160
CNNVD:CNNVD-201404-073
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL的TLS和DTLS实现过程中的d1_both.c和t1_lib.c文件中存在安全漏洞，该漏洞源于当处理Heartbeat Extension数据包时，缺少边界检查。远程攻击者可借助特制的数据包利用该漏洞读取服务器内存中的敏感信息(如用户名、密码、Cookie、私钥等)。以下版本的OpenSSL受到影响：1.0.1，1.0.1:beta1，1.0.1:beta2，1.0.1:beta3，1.0.1a，1.0.1b，1.0.1c，1.0.1d，1.0.1e，1.0.1f。目前OpenSSL官方已经发布补丁，用户可以通过升级修复漏洞，或者使用-DOPENSSL_NO_HEARTBEATS参数重新编译受影响版本的OpenSSL以禁用Heartbeat模块。
solution:Upgrade openssl openssl to a higher version than 1.0.1g,and avoid the version [1.0.1,1.0.1g); Upgrade filezilla-project filezilla_server to a higher version than 0.9.44,and avoid the version (,0.9.44); Upgrade siemens application_processing_engine_firmware to a higher version than 2.0,and avoid the version 2.0; Upgrade siemens cp_1543-1_firmware to a higher version than 1.1,and avoid the version 1.1; Upgrade siemens simatic_s7-1500_firmware to a higher version than 1.5,and avoid the version 1.5; Upgrade siemens simatic_s7-1500t_firmware to a higher version than 1.5,and avoid the version 1.5; Upgrade siemens elan-8.2 to a higher version than 8.3.3,and avoid the version (,8.3.3); Upgrade siemens wincc_open_architecture to a higher version than 3.12,and avoid the version 3.12; Upgrade intellian v100_firmware to a higher version than 1.20,1.21,1.24,and avoid the version 1.20,1.21,1.24; Upgrade intellian v60_firmware to a higher version than 1.15,1.25,and avoid the version 1.15,1.25; Upgrade mitel micollab to a higher version than 6.0,7.0,7.1,7.2,7.3,7.3.0.104,and avoid the version 6.0,7.0,7.1,7.2,7.3,7.3.0.104; Upgrade mitel mivoice to a higher version than 1.1.2.5,1.1.3.3,1.2.0.11,1.3.2.2,1.4.0.102,and avoid the version 1.1.2.5,1.1.3.3,1.2.0.11,1.3.2.2,1.4.0.102; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,13.10,and avoid the version 12.04,12.10,13.10; Upgrade fedoraproject fedora to a higher version than 19,20,and avoid the version 19,20; Upgrade redhat gluster_storage to a higher version than 2.1,and avoid the version 2.1; Upgrade redhat storage to a higher version than 2.1,and avoid the version 2.1; Upgrade redhat virtualization to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade ricon s9922l_firmware to a higher version than 16.10.3(3794,and avoid the version 16.10.3(3794)