CVE:CVE-2019-3863
CNNVD:CNNVD-201903-659
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2中的userauth.c文件的‘userauth_keyboard_interactive()’函数存在缓冲区错误漏洞。远程攻击者可利用该漏洞执行代码。
solution:Upgrade libssh2 libssh2 to a higher version than 1.8.1,and avoid the version (,1.8.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0