CVE:CVE-2016-0787
CNNVD:CNNVD-201603-177
libssh2是一个用于实现SSH2协议的客户端C库。
libssh2 1.7.0之前版本的kex.c文件中的‘diffie_hellman_sha256’函数存在安全漏洞，该漏洞源于程序不正确地将密钥缩短为128位或256位。攻击者可利用该漏洞实施中间人攻击，解密或拦截SSH会话。
solution:Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade libssh2 libssh2 to a higher version than 1.6.0,and avoid the version (,1.6.0]; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0