ClosedHighPatched
regreSSHion: unauthenticated RCE in OpenSSH sshd (CVE-2024-6387)
OpenSSH sshd (glibc-based Linux)
Qualys found a signal handler race condition in OpenSSH's sshd on glibc-based Linux that can give an unauthenticated attacker remote code execution as root. It is a regression of CVE-2006-5051 that came back in OpenSSH 8.5p1 (October 2020). Exploitation is difficult, but Qualys counted over 14 million potentially vulnerable internet-exposed servers. Fixed in OpenSSH 9.8p1.
Why this severity: CVSS 8.1 (Red Hat, CNA); rating Important
- Started
- Jul 1, 2024
- Closed
- Jul 1, 2024
Affected
- 8.5p1 up to (not including) 9.8p1
- Versions before 4.4p1 unless patched for CVE-2006-5051 and CVE-2008-4109 (Qualys)
Fixed in
- 9.8p1
Timeline1
Qualys discloses regreSSHion; OpenSSH 9.8p1 released with the fix
Source
Advisories2
News & write-ups1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
