CVE:CVE-2014-8132
CNNVD:CNNVD-201412-588
libssh是一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh 0.5.x版本和0.6.4之前0.6.x版本的kex.c文件中的‘ssh_packet_kexinit’函数存在双重释放漏洞。远程攻击者可借助特制的kexinit数据包利用该漏洞造成拒绝服务。
solution:Upgrade libssh libssh to a higher version than 0.5.0,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.6.2,0.6.3,and avoid the version 0.5.0,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.6.2,0.6.3; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade opensuse opensuse to a higher version than 12.3,13.1,13.2,and avoid the version 12.3,13.1,13.2; Upgrade fedoraproject fedora to a higher version than 19,20,21,and avoid the version 19,20,21; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10