What’s Vulnerable › Vulnerabilities
CVE-2024-6387: Openssh: regresshion - race condition in ssh allows rce/dos
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 99.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-07-01 · updated 2026-10-15
- Weakness: CWE-364
Description
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Affected products
- Almalinux: 9.0
- Amazon Linux: 2023.0
- Apple macOS: from 12.0 before 12.7.6; from 13.0 before 13.6.8; from 14.0 before 14.6 — fixed in 12.7.6, 13.6.8, 14.6
- Arista Networks EOS: from 4.32.0 through 4.32.1f
- Canonical Ubuntu Linux: 23.10, 24.04, 22.04, 22.10, 23.04
- Debian Linux: 12.0
- FreeBSD: 13.2, 13.2-p1, 13.2-p10, 13.2-p11, 13.2-p2, 13.2-p3 (+23)
- NetApp 500F Firmware: all versions
- NetApp 8300 Firmware: all versions
- NetApp 8700 Firmware: all versions
- NetApp A150 Firmware: all versions
- NetApp A1K Firmware: all versions
- NetApp A220 Firmware: all versions
- NetApp A250 Firmware: all versions
- NetApp A400 Firmware: all versions
- NetApp A700S Firmware: all versions
- NetApp A70 Firmware: all versions
- NetApp A800 Firmware: all versions
- NetApp A900 Firmware: all versions
- NetApp A90 Firmware: all versions
- NetApp A9500 Firmware: all versions
- Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
- NetApp Bootstrap Os: all versions
- NetApp C190 Firmware: all versions
- NetApp C250 Firmware: all versions
- NetApp C400 Firmware: all versions
- NetApp C800 Firmware: all versions
- E-Series SANtricity OS Controller Software 11.x: from 11.0.0 through 11.70.2
- NetApp Fas2720 Firmware: all versions
- NetApp Fas2750 Firmware: all versions
How to fix
Upgrade to a fixed version: Apple macOS 12.7.6, 13.6.8, 14.6; OpenSSH 4.4. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2024:4312
- https://access.redhat.com/errata/RHSA-2024:4340
- https://access.redhat.com/errata/RHSA-2024:4389
- https://access.redhat.com/errata/RHSA-2024:4469
- https://access.redhat.com/errata/RHSA-2024:4474
- https://access.redhat.com/errata/RHSA-2024:4479
- https://access.redhat.com/errata/RHSA-2024:4484
- https://access.redhat.com/security/cve/CVE-2024-6387
- https://bugzilla.redhat.com/show_bug.cgi?id=2294604
- https://santandersecurityresearch.github.io/blog/sshing_the_masses.html
- https://www.openssh.com/txt/release-9.8
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
Get alerted when CVE-2024-6387 or the next vulnerability affects your stack