CVE:CVE-2022-1292
CNNVD:CNNVD-202205-1962
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 存在操作系统命令注入漏洞，该漏洞源于c_rehash 脚本未正确清理 shell 元字符导致命令注入。攻击者利用该漏洞执行任意命令。
solution:Upgrade openssl openssl to a higher version than 1.0.2ze,1.1.1o,3.0.3,and avoid the version [1.0.2,1.0.2ze),[1.1.1,1.1.1o),[3.0.0,3.0.3); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp aff_8300_firmware to a higher version than -; Upgrade netapp fas_8300_firmware to a higher version than -; Upgrade netapp aff_8700_firmware to a higher version than -; Upgrade netapp fas_8700_firmware to a higher version than -; Upgrade netapp aff_a400_firmware to a higher version than -; Upgrade netapp fabric-attached_storage_a400_firmware to a higher version than -; Upgrade netapp a250_firmware to a higher version than -; Upgrade netapp aff_500f_firmware to a higher version than -; Upgrade netapp fas_500f_firmware to a higher version than -; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle mysql_server to a higher version than 5.7.38,8.0.29,and avoid the version [5.0.0,5.7.38],[8.0.0,8.0.29]; Upgrade oracle mysql_workbench to a higher version than 8.0.29,and avoid the version (,8.0.29]; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36