CVE:CVE-2021-4160
CNNVD:CNNVD-202201-2650
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 存在输入验证错误漏洞，该漏洞源于 MIPS32 和 MIPS64 平方过程中存在进位传播错误。
solution:Upgrade openssl openssl to a higher version than 1.0.2zb,1.1.1m,3.0.0,3.0.0:alpha1,3.0.0:alpha10,3.0.0:alpha11,3.0.0:alpha12,3.0.0:alpha13,3.0.0:alpha14,3.0.0:alpha15,3.0.0:alpha16,3.0.0:alpha17,3.0.0:alpha2,3.0.0:alpha3,3.0.0:alpha4,3.0.0:alpha5,3.0.0:alpha6,3.0.0:alpha7,3.0.0:alpha8,3.0.0:alpha9,3.0.0:beta1,3.0.0:beta2,and avoid the version [1.0.2,1.0.2zb],[1.1.1,1.1.1m),3.0.0,3.0.0:alpha1,3.0.0:alpha10,3.0.0:alpha11,3.0.0:alpha12,3.0.0:alpha13,3.0.0:alpha14,3.0.0:alpha15,3.0.0:alpha16,3.0.0:alpha17,3.0.0:alpha2,3.0.0:alpha3,3.0.0:alpha4,3.0.0:alpha5,3.0.0:alpha6,3.0.0:alpha7,3.0.0:alpha8,3.0.0:alpha9,3.0.0:beta1,3.0.0:beta2; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade oracle health_sciences_inform_publisher to a higher version than 6.2.1.1,6.3.1.1,and avoid the version 6.2.1.1,6.3.1.1; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.3,and avoid the version 9.2.6.3; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,8.59,and avoid the version 8.58,8.59; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,and avoid the version (,1.0),1.0,1.0:sp1; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0