Help Center/ Host Security Service/ Best Practices/ Suggestions on How to Fix Official Disclosed Vulnerabilities Provided by HSS/ OpenSSL High-risk Vulnerability (CVE-2020-1967)
Updated on 2024-09-23 GMT+08:00
View PDF
Share

OpenSSL High-risk Vulnerability (CVE-2020-1967)

OpenSSL Project released update information regarding the OpenSSL vulnerability CVE-2020-1967 that affects OpenSSL 1.1.1d, OpenSSL 1.1.1e, and OpenSSL 1.1.1f. This vulnerability can be exploited to launch DDoS attacks.

Vulnerability ID

CVE-2020-1967

Vulnerability Name

OpenSSL high-risk vulnerability

Scope of Impact

  • OpenSSL 1.1.1d
  • OpenSSL 1.1.1e
  • OpenSSL 1.1.1f

Official Solution

It is recommended that affected users install the latest vulnerability patch as soon as possible.

Suggestion

Perform the following steps to scan and fix a vulnerability.

  1. Detect and view vulnerability details, as shown in Manually starting a vulnerability scan. For details, see Viewing Vulnerability Details.

    Figure 1 Manually starting a vulnerability scan

  2. Fix vulnerabilities and verify the result. For details, see Handling Vulnerabilities..