CVE:CVE-2021-3712
CNNVD:CNNVD-202108-1947
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
openssl 存在缓冲区错误漏洞，该漏洞源于产品假设 ASN.1 字符串使用NULL作为终止符。攻击者可通过制作非NULL终止的字符串发起攻击可导致应用程序内存崩溃或者应用程序崩溃。以下产品及版本受到影响：openssl 1.0.2y 之前版本。
solution:Upgrade openssl openssl to a higher version than 1.0.2za,1.1.1l,and avoid the version [1.0.2,1.0.2za),[1.1.1,1.1.1l); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.50.2,and avoid the version [11.0,11.50.2]; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp manageability_software_development_kit to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp storage_encryption to a higher version than -; Upgrade mcafee epolicy_orchestrator to a higher version than 5.10.0,5.10.0,5.10.0:update_1,5.10.0:update_10,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6,5.10.0:update_7,5.10.0:update_8,5.10.0:update_9,and avoid the version (,5.10.0),5.10.0,5.10.0:update_1,5.10.0:update_10,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6,5.10.0:update_7,5.10.0:update_8,5.10.0:update_9; Upgrade tenable nessus_network_monitor to a higher version than 6.0.0,and avoid the version (,6.0.0); Upgrade tenable tenable.sc to a higher version than 5.19.1,and avoid the version [5.16.0,5.19.1]; Upgrade oracle essbase to a higher version than 11.1.2.4.047,21.3,21.3,and avoid the version (,11.1.2.4.047),[21.0,21.3),21.3; Upgrade oracle mysql_connectors to a higher version than 8.0.27,and avoid the version (,8.0.27]; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.25,and avoid the version (,8.0.25]; Upgrade oracle mysql_server to a higher version than 5.7.35,8.0.26,and avoid the version [5.7.0,5.7.35],[8.0.0,8.0.26]; Upgrade oracle mysql_workbench to a higher version than 8.0.26,and avoid the version (,8.0.26]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle secure_backup to a higher version than 18.1.0.1.0,and avoid the version 18.1.0.1.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 1.7.0,and avoid the version 1.7.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle communications_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle communications_unified_session_manager to a higher version than 8.2.5,8.4.5,and avoid the version 8.2.5,8.4.5; Upgrade oracle enterprise_communications_broker to a higher version than 3.2.0,3.3.0,and avoid the version 3.2.0,3.3.0; Upgrade oracle enterprise_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle health_sciences_inform_publisher to a higher version than 6.2.1.0,6.3.1.1,and avoid the version 6.2.1.0,6.3.1.1; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.3,and avoid the version (,9.2.6.3); Upgrade oracle jd_edwards_world_security to a higher version than a9.4,and avoid the version a9.4