CVE:CVE-2020-1967
CNNVD:CNNVD-202004-1790
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.1d版本、1.1.1e版本和1.1.1f版本中的‘SSL_check_chain()’函数存在代码问题漏洞。远程攻击者可利用该漏洞导致服务器或客户端应用程序崩溃。
solution:Upgrade openssl openssl to a higher version than 1.1.1f,and avoid the version [1.1.1d,1.1.1f]; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade freebsd freebsd to a higher version than 12.1,and avoid the version 12.1; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade oracle application_server to a higher version than 12.1.3,and avoid the version 12.1.3; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle enterprise_manager_for_storage_management to a higher version than 13.3.0.0,13.4.0.0,and avoid the version 13.3.0.0,13.4.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0,and avoid the version 12.4.0; Upgrade oracle http_server to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4; Upgrade oracle mysql to a higher version than 5.6.48,5.7.30,8.0.20,and avoid the version (,5.6.48],[5.7.0,5.7.30],[8.0.0,8.0.20]; Upgrade oracle mysql_connectors to a higher version than 8.0.20,and avoid the version (,8.0.20]; Upgrade oracle mysql_enterprise_monitor to a higher version than 4.0.12,8.0.20,and avoid the version (,4.0.12],[8.0.0,8.0.20]; Upgrade oracle mysql_workbench to a higher version than 8.0.21,and avoid the version (,8.0.21]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,8.59,and avoid the version 8.56,8.57,8.58,8.59; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp e-series_performance_analyzer to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade jdedwards enterpriseone to a higher version than 9.2.5.0,and avoid the version (,9.2.5.0); Upgrade tenable log_correlation_engine to a higher version than 6.0.9,and avoid the version (,6.0.9)