TLP:CLEARModifiedPublished 1 Jul 2024 · Updated 15 Oct 2026
CVE-2024-6387
8.1HighCVSS 3.1
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
- Affected software
- Red Hat Enterprise Linux 9
- Versions
- Not stated
- Weakness
- CWE-364
- Assigned by
- Red Hat
- NVD status
- Modified
ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2024-6387 CVE.org https://www.cve.org/CVERecord?id=CVE-2024-6387 Release Notes https://www.openssh.com/txt/release-9.8Mailing List http://www.openwall.com/lists/oss-security/2024/07/03/3Release Notes https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.ascPatch https://github.com/openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09Mailing List https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html