CVE:CVE-2022-2068
CNNVD:CNNVD-202206-2112
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.0.2、1.1.1 和 3.0 版本存在安全漏洞，该漏洞源于错误地处理了 c_rehash 脚本。本地攻击者可能会在运行 c_rehash 时利用该漏洞执行任意命令。
solution:Upgrade openssl openssl to a higher version than 1.0.2zf,1.1.1p,3.0.4,and avoid the version [1.0.2,1.0.2zf),[1.1.1,1.1.1p),[3.0.0,3.0.4); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,1.0:sp2,and avoid the version (,1.0),1.0,1.0:sp1,1.0:sp2; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp ontap_antivirus_connector to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -; Upgrade netapp h615c_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp h610c_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp fas_8300_firmware to a higher version than -; Upgrade netapp fas_8700_firmware to a higher version than -; Upgrade netapp fas_a400_firmware to a higher version than -; Upgrade netapp aff_8300_firmware to a higher version than -; Upgrade netapp aff_8700_firmware to a higher version than -; Upgrade netapp aff_a400_firmware to a higher version than -; Upgrade broadcom sannav to a higher version than -