CVE:CVE-2019-1551
CNNVD:CNNVD-201912-272
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.1版本至1.1.1d版本和1.0.2版本至1.0.2t版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade openssl openssl to a higher version than 1.0.2t,1.1.1d,and avoid the version [1.0.2,1.0.2t],[1.1.1,1.1.1d]; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 4.0.12,8.0.20,and avoid the version (,4.0.12],[8.0.0,8.0.20]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,and avoid the version 16.04,18.04,19.10; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade tenable log_correlation_engine to a higher version than 6.0.9,and avoid the version (,6.0.9)