CVE:CVE-2021-4044
CNNVD:CNNVD-202112-1132
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 存在代码问题漏洞，该漏洞源于OpenSSL中的libssl在内部调用客户端上的X509 verify cert()来验证服务器提供的证书,该函数可能返回一个负的返回值来表示内部错误(例如内存不足),这样的负返回值被OpenSSL错误地处理，并将导致IO函数(如SSL connect()或SSL do handshake())不能指示成功，随后调用SSL get error()返回值SSL error WANT RETRY VERIFY,这个返回值只有在应用程序之前调用SSL CTX set cert verify cal时才应该由OpenSSL返回。
solution:Upgrade openssl openssl to a higher version than 1.0.2,1.1.0,3.0.0,and avoid the version (,1.0.2),1.1.0,3.0.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp e-series_performance_analyzer to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp baseboard_management_controller_a250_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_500f_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade nodejs node.js to a higher version than 17.3.0,and avoid the version [17.0.0,17.3.0)