CVE:CVE-2022-0778
CNNVD:CNNVD-202203-1394
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL1.0.2 版本、1.1.1版本和3.0版本存在安全漏洞，该漏洞源于计算模平方根的BN_mod_sqrt() 函数存在错误，可能导致对于非素数模数无线循环。攻击者可以发送特殊的函数参数值利用该漏洞导致应用在解析证书的过程中触发拒绝服务。
solution:Upgrade openssl openssl to a higher version than 1.0.2zd,1.1.1n,3.0.2,and avoid the version [1.0.2,1.0.2zd),[1.1.0,1.1.1n),[3.0.0,3.0.2); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp cloud_volumes_ontap_mediator to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade netapp a250_firmware to a higher version than -; Upgrade netapp 500f_firmware to a higher version than -; Upgrade fedoraproject fedora to a higher version than 34,36,and avoid the version 34,36; Upgrade tenable nessus to a higher version than 8.15.4,10.1.2,and avoid the version (,8.15.4),[10.0.0,10.1.2); Upgrade mariadb mariadb to a higher version than 10.2.42,10.3.33,10.4.23,10.5.14,10.6.6,10.7.2,and avoid the version [10.2.0,10.2.42),[10.3.0,10.3.33),[10.4.0,10.4.23),[10.5.0,10.5.14),[10.6.0,10.6.6),[10.7.0,10.7.2); Upgrade nodejs node.js to a higher version than 12.12.0,12.22.11,14.14.0,14.19.1,16.12.0,16.14.2,17.7.2,and avoid the version [12.0.0,12.12.0],[12.13.0,12.22.11),(14.0.0,14.14.0],[14.15.0,14.19.1),(16.0.0,16.12.0],[16.13.0,16.14.2),(17.0.0,17.7.2)