CVE:CVE-2017-17428
CNNVD:CNNVD-201712-577
Cavium Nitrox SSL、Nitrox V SSL和TurboSSL software development kits（SDKs）都是美国Cavium公司的产品。Cavium Nitrox SSL是一款用于Nitrox的安全处理器。Nitrox V SSL SSL是一款用于Nitrox V SSL的安全处理器。TurboSSL software development kits（SDKs）是一套软件开发工具。
Cavium Nitrox SSL、Nitrox V SSL和TurboSSL SDKs中存在信息泄露漏洞，该漏洞源于程序没有正确的实现用于预防Bleichenbacher攻击的对策。远程攻击者可通过向设备发送特制的TLS消息利用该漏洞解密TLS密文数据。
solution:Upgrade cavium nitrox_ssl_sdk to a higher version than 6.1.0,and avoid the version (,6.1.0]; Upgrade cavium nitrox_v_ssl_sdk to a higher version than 1.2,and avoid the version (,1.2]; Upgrade cavium octeon_sdk to a higher version than 1.7.2,and avoid the version (,1.7.2]; Upgrade cavium octeon_ssl_sdk to a higher version than 1.5.0,and avoid the version (,1.5.0]; Upgrade cavium turbossl_sdk to a higher version than 1.0,and avoid the version (,1.0]; Upgrade cisco webex_conect_im to a higher version than 7.24.1,and avoid the version 7.24.1; Upgrade cisco webex_meetings to a higher version than t31,t32,and avoid the version t31,t32; Upgrade cisco ace4710_application_control_engine_firmware to a higher version than 3.0(0a5(2.0,3.0(0a5(3.0,3.0(0a5(3.5,and avoid the version 3.0(0)a5(2.0),3.0(0)a5(3.0),3.0(0)a5(3.5); Upgrade cisco ace30_application_control_engine_module_firmware to a higher version than 3.0(0a5(2.0,3.0(0a5(3.0,3.0(0a5(3.5,and avoid the version 3.0(0)a5(2.0),3.0(0)a5(3.0),3.0(0)a5(3.5); Upgrade cisco adaptive_security_appliance_5520_firmware to a higher version than 9.1(7.16,and avoid the version 9.1(7.16); Upgrade cisco adaptive_security_appliance_5540_firmware to a higher version than 9.1(7.16,and avoid the version 9.1(7.16); Upgrade cisco adaptive_security_appliance_5550_firmware to a higher version than 9.1(7.16,and avoid the version 9.1(7.16); Upgrade cisco adaptive_security_appliance_5510_firmware to a higher version than 9.1(7.16,and avoid the version 9.1(7.16); Upgrade cisco adaptive_security_appliance_5505_firmware to a higher version than 9.1(7.16,and avoid the version 9.1(7.16)