ISOMAN

CVE

CVE-2024-6387

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Severity
HIGH
CVSS
8.1
Published
Modified

Linked Releases

References

  1. https://access.redhat.com/errata/RHSA-2024:4312
  2. https://access.redhat.com/errata/RHSA-2024:4340
  3. https://access.redhat.com/errata/RHSA-2024:4389
  4. https://access.redhat.com/errata/RHSA-2024:4469
  5. https://access.redhat.com/errata/RHSA-2024:4474
  6. https://access.redhat.com/errata/RHSA-2024:4479
  7. https://access.redhat.com/errata/RHSA-2024:4484
  8. https://access.redhat.com/security/cve/CVE-2024-6387
  9. https://bugzilla.redhat.com/show_bug.cgi?id=2294604
  10. https://santandersecurityresearch.github.io/blog/sshing_the_masses.html
  11. https://www.openssh.com/txt/release-9.8
  12. https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
  13. http://seclists.org/fulldisclosure/2024/Jul/18
  14. http://seclists.org/fulldisclosure/2024/Jul/19
  15. http://seclists.org/fulldisclosure/2024/Jul/20
  16. http://www.openwall.com/lists/oss-security/2024/07/01/12
  17. http://www.openwall.com/lists/oss-security/2024/07/01/13
  18. http://www.openwall.com/lists/oss-security/2024/07/02/1
  19. http://www.openwall.com/lists/oss-security/2024/07/03/1
  20. http://www.openwall.com/lists/oss-security/2024/07/03/11