CVE:CVE-2020-25644
CNNVD:CNNVD-202010-134
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
WildFly OpenSSL 1.1.3版本存在安全漏洞，该漏洞源于发现了内存泄漏缺陷，它删除一个HTTP会话。攻击者可利用该漏洞造成OOM，从而导致拒绝服务。
solution:Upgrade redhat wildfly_openssl to a higher version than 1.1.3,and avoid the version (,1.1.3); Upgrade redhat data_grid to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat jboss_data_grid to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat jboss_fuse to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat single_sign-on to a higher version than 7.0,and avoid the version 7.0; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp service_level_manager to a higher version than -