漏洞信息详情
OpenSSL 信任管理问题漏洞
- CNNVD编号：CNNVD-201907-1552
- 危害等级： 低危
- CVE编号： CVE-2019-1552
- 漏洞类型： 信任管理问题
- 发布时间： 2019-07-30
- 威胁类型： 本地
- 更新时间： 2021-08-05
- 厂 商：
- 漏洞来源：
漏洞简介
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 1.1.1版本至1.1.1c版本、1.1.0版本至1.1.0k版本和1.0.2版本至1.0.2s版本中存在安全漏洞。攻击者可利用该漏洞绕过安全保护。
漏洞公告
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://www.openssl.org/news/secadv/20190730.txt
参考网址
来源:MISC
链接:https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.HTML
来源:CONFIRM
链接:https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=54aa9d51b09d67e90db443f682cface795f5af9e
来源:CONFIRM
链接:https://kc.mcafee.com/corporate/index?page=content&id=SB10365
来源:N/A
链接:https://www.oracle.com/security-alerts/cpuapr2020.HTML
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20190823-0006/
来源:CONFIRM
链接:https://www.openssl.org/news/secadv/20190730.txt
来源:git.openssl.org
链接:https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e32bc855a81a2d48d215c506bdeb4f598045f7e9
来源:git.openssl.org
链接:https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d333ebaf9c77332754a9d5e111e2f53e1de54fdd
来源:git.openssl.org
链接:https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b15a19c148384e73338aa7c5b12652138e35ed28
来源:MISC
链接:https://www.oracle.com/security-alerts/cpuoct2020.HTML
来源:CONFIRM
链接:https://support.f5.com/csp/article/K94041354
来源:CONFIRM
链接:https://support.f5.com/csp/article/K94041354?utm_source=f5support&utm_medium=RSS
来源:CONFIRM
链接:https://www.tenable.com/security/tns-2019-08
来源:CERT-VN
链接:https://www.kb.cert.org/vuls/id/429301
来源:CONFIRM
链接:https://www.tenable.com/security/tns-2019-09
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/
来源:MISC
链接:https://www.oracle.com/security-alerts/cpujan2020.HTML
来源:MISC
链接:https://www.oracle.com/security-alerts/cpujul2020.HTML
来源:support.symantec.com
链接:https://support.symantec.com/us/en/article.SYMSA1490.HTML
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1115031
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1115109
来源:support.symantec.com
链接:http://support.symantec.com/us/en/article.SYMSA1490.HTML
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/2016771
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/2020677
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/2027745
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1126581
来源:www.kb.cert.org
链接:https://www.kb.cert.org/vuls/id/429301
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-openssl-vulnerabilities-affect-ibm-spectrum-control-formerly-tivoli-storage-productivity-center/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-openssl-publicly-disclosed-vulnerability/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-openssl-affect-ibm-tivoli-netcool-system-service-monitors-application-service-monitors-cve-2018-5407cve-2020-1967cve-2018-0734cve-2019-1563cve-2019/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-master-data-management-server-vulnerability-in-openssl/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-dcnm-network-management-software-used-by-ibm-c-type-san-directors-and-switches/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-openssl-vulnerabilites-impacting-ibm-aspera-streaming-for-video-3-8-0-and-earlier-cve-2019-1552/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3729/
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1118895
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-openssl-library-affect-os-pattern-kit-used-in-ibm-cloud-pak-system/
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1137634
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.0487/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4784/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-aspera-web-faspex-application-is-affected-by-openssl-vulnerability-cve-2019-1552/
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/1172278
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3390.4/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-an-openssl-vulnerability-3/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-1552
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-cve-2019-1552-vulnerability-in-openssl-affect-ibm-workload-scheduler/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3390/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.0773/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/OpenSSL-Windows-privilege-escalation-via-OPENSSLDIR-29914
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.2593
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-aspera-on-demand-products-are-affected-by-openssl-vulnerability-cve-2019-1552/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-ibm-spectrum-protect-backup-archive-client-netapp-services-cve-2019-1547-cve-2019-1549-cve-2019-1563-cve-2019-1552/
受影响实体
暂无
补丁
- OpenSSL 安全漏洞的修复措施
评论