CVE:CVE-2019-3860
CNNVD:CNNVD-201903-655
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2中存在越界读取漏洞。远程攻击者可借助特制的SFTP数据包利用该漏洞造成拒绝服务或读取客户端内存中的数据。
solution:Upgrade libssh2 libssh2 to a higher version than 1.8.0,and avoid the version [0.3,1.8.0]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3