CVE:CVE-2019-3859
CNNVD:CNNVD-201903-653
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2中的‘_libssh2_packet_require’和‘_libssh2_packet_requirev’函数存在越界读取漏洞。远程攻击者可利用该漏洞造成拒绝服务或读取客户端内存中的数据。
solution:Upgrade libssh2 libssh2 to a higher version than 1.8.1,and avoid the version (,1.8.1); Upgrade fedoraproject fedora to a higher version than 28,29,and avoid the version 28,29; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3