CVE:CVE-2016-0739
CNNVD:CNNVD-201603-464
libssh是一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh 0.7.3之前版本中存在安全漏洞，该漏洞源于程序没有正确将diffie-hellman-group1和diffie-hellman-group14密钥交换算法的临时密钥缩短为128位。攻击者可利用该漏洞实施中间人攻击，解密或拦截SSH会话。
solution:Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10; Upgrade libssh libssh to a higher version than 0.7.2,and avoid the version (,0.7.2]; Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0