CVE:CVE-2021-3634
CNNVD:CNNVD-202108-2375
Libssh是Libssh组织的一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh 存在缓冲区错误漏洞，该漏洞源于 libssh 允许在密钥重新交换操作中改变密钥交换方法。改变密钥交换方法时，如果采用不同长度的 hash ，将会导致缓冲区错误。
solution:Upgrade libssh libssh to a higher version than 0.9.6,and avoid the version [0.9.1,0.9.6); Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade oracle mysql_workbench to a higher version than 8.0.27,and avoid the version (,8.0.27]; Upgrade netapp cloud_backup to a higher version than -