CVE:CVE-2018-15473
CNNVD:CNNVD-201808-536
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。
OpenSSH 7.7及之前版本中存在竞争条件问题漏洞。该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。
solution:Upgrade openbsd openssh to a higher version than 7.7,and avoid the version (,7.7]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade netapp cn1610_firmware to a higher version than -; Upgrade netapp aff_baseboard_management_controller to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp data_ontap_edge to a higher version than -; Upgrade netapp fas_baseboard_management_controller to a higher version than -; netapp oncommand_unified_manager avoid the version [9.4,); Upgrade netapp ontap_select_deploy to a higher version than -; Upgrade netapp service_processor to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; netapp virtual_storage_console avoid the version [7.2,); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp data_ontap to a higher version than -; netapp vasa_provider avoid the version [7.2,); netapp storage_replication_adapter avoid the version [7.2,); Upgrade oracle sun_zfs_storage_appliance_kit to a higher version than 8.8.6,and avoid the version 8.8.6; Upgrade siemens scalance_x204rna_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7)