CVE:CVE-2018-0735
CNNVD:CNNVD-201810-1395
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.0-1.1.0i版本和1.1.1版本中的ECDSA签名算法存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。
solution:Upgrade openssl openssl to a higher version than 1.1.0i,1.1.1,and avoid the version [1.1.0,1.1.0i],1.1.1; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade nodejs node.js to a higher version than 10.12.0,11.3.0,10.13.0,and avoid the version [10.0.0,10.12.0),[11.0.0,11.3.0),10.13.0; Upgrade netapp cn1610_firmware to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp oncommand_unified_manager to a higher version than *,and avoid the version [9.4,),no fixed version after 9.4; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapdrive to a higher version than -; Upgrade netapp steelstore to a higher version than -; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle application_server to a higher version than 0.9.8,1.0.0,1.0.1,and avoid the version 0.9.8,1.0.0,1.0.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0,and avoid the version 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,and avoid the version 12.3.3; Upgrade oracle mysql to a higher version than 5.6.42,5.7.24,8.0.13,and avoid the version (,5.6.42],[5.7.0,5.7.24],[8.0.0,8.0.13]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 17.12,8.4,15.1,15.2,16.1,16.2,18.8,and avoid the version [17.7,17.12],8.4,15.1,15.2,16.1,16.2,18.8; Upgrade oracle secure_global_desktop to a higher version than 5.4,and avoid the version 5.4; Upgrade oracle tuxedo to a higher version than 12.1.1.0.0,and avoid the version 12.1.1.0.0; Upgrade oracle vm_virtualbox to a higher version than 6.0.0,5.2.24,and avoid the version (,6.0.0),[5.0.0,5.2.24)