正文

OpenSSL 加密问题漏洞

admin
admin V管理员 /0 评论 /14 阅读
0304
此篇文章发布距今已超过1170天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

OpenSSL 加密问题漏洞

  • CNNVD编号：CNNVD-202102-1230
    • <!--
  • 危害等级： 低危-->
  • 危害等级： 低危
  • CVE编号： CVE-2021-23839
  • 漏洞类型： 加密问题
  • 发布时间： 2021-02-16
  • 威胁类型： 远程
  • 更新时间： 2021-10-21
  • 厂        商：
  • 漏洞来源：

漏洞简介

OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。

OpenSSL 1.0.2 存在加密问题漏洞，该漏洞源于在解除填充RSA签名时，将对版本回滚攻击进行检查。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://bugzilla.redhat.com/show_bug.cgi?id=1930294

参考网址

来源:N/A

链接:https://www.oracle.com//security-alerts/cpujul2021.html

来源:CONFIRM

链接:https://www.openssl.org/news/secadv/20210216.txt

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210219-0009/

来源:CONFIRM

链接:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:CONFIRM

链接:https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=30919ab80a478f2d81f2e9acdcca3fa4740cd547

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuApr2021.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-was-identified-and-remediated-in-the-ibm-maas360-cloud-extender-v2-103-000-051-and-modules/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-sdk-for-node-js-in-ibm-cloud-5/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-openssl-affect-ibm-tivoli-netcool-system-service-monitors-application-service-monitors/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-openssl-vulnerabilities-affect-ibm-connectdirect-for-hp-nonstop/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-openssl-affects-ibm-rational-clearcase-cve-2020-1971-cve-2021-23839-cve-2021-23840-cve-2021-23841-cve-2021-23839-cve-2021-23840-cve-2021-23841/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-aix-cve-2021-23839-cve-2021-23840-and-cve-2021-23841/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1502

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2657

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/OpenSSL-1-0-2-read-write-access-via-SSLv2-Rollback-Protection-Bypass-34596

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-websphere-mq-for-hp-nonstop-server-is-affected-by-multiple-openssl-vulnerabilities-cve-2021-23839-cve-2021-23840-and-cve-2021-23841/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-for-hp-nonstop-server-is-affected-by-openssl-vulnerabilities-cve-2021-23839-cve-2021-23840-and-cve-2021-23841/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0636

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021041501

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-openssl-vulnerabilites-impacting-aspera-high-speed-transfer-server-aspera-high-speed-transfer-endpoint-aspera-desktop-client-4-0-and-earlier-cve-2021-23839-cve-2021-23840-cve/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectexpress-for-unix-is-affected-by-multiple-vulnerabilities-in-openssl-2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilites-affect-engineering-lifecycle-management-and-ibm-engineering-products/

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021092209

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-ibm-integration-bus-and-ibm-app-connect-enterprise-v11-cve-2021-23839-cve-2021-23840/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-aix-cve-2021-23839-cve-2021-23840-and-cve-2021-23841-2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-ibm-integration-bus-and-ibm-app-connect-enterprise-v11-cve-2021-23839-cve-2021-23840-2/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-23839

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-openssl-vulnerabilites-impacting-aspera-high-speed-transfer-server-aspera-high-speed-transfer-endpoint-aspera-desktop-client-4-0-and-earlier-cve-2021-23839-cve-2021-23840-cve-2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2259.2

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-fixed-in-openssl-as-shipped-with-ibm-security-verify-products/

受影响实体

    暂无


补丁

  • OpenSSL 加密问题漏洞的修复措施
    <!--
    2021-2-16
    -->