CVE:CVE-2019-17498
CNNVD:CNNVD-201910-1276
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2 1.9.0及之前版本中的packet.c文件的SSH_MSG_DISCONNECT逻辑存在输入验证错误漏洞。攻击者可借助特制的SSH服务器利用该漏洞泄露敏感信息或造成拒绝服务。
solution:Upgrade libssh2 libssh2 to a higher version than 1.9.0,and avoid the version (,1.9.0]; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -