CVE:CVE-2019-13115
CNNVD:CNNVD-201907-816
libssh2是一款实现SSH2协议的客户端C库，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。
libssh2 1.9.0之前版本中的kex.c文件的ex_method_diffie_hellman_group_exchange_sha256_key_exchange存在输入验证错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade libssh2 libssh2 to a higher version than 1.9.0,and avoid the version (,1.9.0); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade f5 traffix_systems_signaling_delivery_controller to a higher version than 5.1.0,and avoid the version [5.0.0,5.1.0]