CVE:CVE-2019-3855
CNNVD:CNNVD-201903-634
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2中存在输入验证错误漏洞，该漏洞源于_libssh2_transport_read()函数没有正确地检查来自服务器的packet_length值。远程攻击者可利用该漏洞在客户端系统上执行代码。
solution:Upgrade libssh2 libssh2 to a higher version than 1.8.1,and avoid the version (,1.8.1); Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3; Upgrade apple xcode to a higher version than 11.0,and avoid the version (,11.0); Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,and avoid the version 8.56,8.57