CVE:CVE-2018-0734
CNNVD:CNNVD-201810-1435
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.1版本、1.1.0版本至1.1.0i版本和1.0.2版本至1.0.2p版本中的DSA签名算法存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。
solution:Upgrade openssl openssl to a higher version than 1.0.2p,1.1.0i,1.1.1,and avoid the version [1.0.2,1.0.2p],[1.1.0,1.1.0i],1.1.1; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade nodejs node.js to a higher version than 6.8.1,6.15.0,8.8.1,8.14.0,10.12.0,11.3.0,10.13.0,and avoid the version [6.0.0,6.8.1],[6.9.0,6.15.0),[8.0.0,8.8.1],[8.9.0,8.14.0),[10.0.0,10.12.0],[11.0.0,11.3.0),10.13.0; Upgrade netapp cn1610_firmware to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp oncommand_unified_manager to a higher version than *; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp steelstore to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle e-business_suite_technology_stack to a higher version than 0.9.8,1.0.0,1.0.1,and avoid the version 0.9.8,1.0.0,1.0.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0,and avoid the version 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,and avoid the version 12.3.3; Upgrade oracle mysql_enterprise_backup to a higher version than 3.12.3,4.1.2,and avoid the version [3.0,3.12.3],[4.0,4.1.2]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle primavera_p6_professional_project_management to a higher version than 17.12,8.4,15.1,15.2,16.1,16.2,18.8,and avoid the version [17.7,17.12],8.4,15.1,15.2,16.1,16.2,18.8; Upgrade oracle tuxedo to a higher version than 12.1.1.0.0,and avoid the version 12.1.1.0.0