CVE-2024-6387
High
Description
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Openbsd Openssh
PublishedJul 1, 2024
First seenJul 1, 2024
Weakness typeCWE-364CWE-364
How to fix
Update
- openbsd openssh4.4 or later
- apple macos12.7.6, 13.6.8, 14.6 or later
Patches
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd openssh | v < 4.4, 8.6 ≤ v ≤ 9.8, 4.4, 8.5, 8.6 | 4.4 |
| sonicwall sma_6200_firmware | No range specified | — |
| sonicwall sma_7200_firmware | No range specified | — |
| arista eos | 4.32.0 ≤ v ≤ 4.32.1f | — |
| canonical ubuntu_linux | 23.10, 24.04, 22.04, 22.10, 23.04 | — |
| almalinux almalinux | 9.0 | — |
| sonicwall sma_6210_firmware | No range specified | — |
| sonicwall sma_7210_firmware | No range specified | — |
| sonicwall sma_8200v_firmware | No range specified | — |
| sonicwall sra_ex_7000_firmware | No range specified | — |
| netapp a1k_firmware | No range specified | — |
| netapp a70_firmware | No range specified | — |
| netapp a90_firmware | No range specified | — |
| netapp a700s_firmware | No range specified | — |
| netapp 8300_firmware | No range specified | — |
| netapp 8700_firmware | No range specified | — |
| netapp a400_firmware | No range specified | — |
| netapp c400_firmware | No range specified | — |
| netapp a250_firmware | No range specified | — |
| netapp 500f_firmware | No range specified | — |
| netapp c250_firmware | No range specified | — |
| netapp a800_firmware | No range specified | — |
| netapp c800_firmware | No range specified | — |
| netapp a900_firmware | No range specified | — |
| netapp a9500_firmware | No range specified | — |
| netapp c190_firmware | No range specified | — |
| netapp a150_firmware | No range specified | — |
| netapp a220_firmware | No range specified | — |
| netapp fas2720_firmware | No range specified | — |
| netapp fas2750_firmware | No range specified | — |
| netapp fas2820_firmware | No range specified | — |
| netapp bootstrap_os | No range specified | — |
| apple macos | 12.0 ≤ v < 12.7.6, 13.0 ≤ v < 13.6.8, 14.0 ≤ v < 14.6 | 12.7.6, 13.6.8, 14.6 |
| redhat openshift_container_platform | 4.0 | — |
| redhat enterprise_linux | 9.0 | — |
| redhat enterprise_linux_eus | 9.4 | — |
| redhat enterprise_linux_for_arm_64 | 9.0_aarch64 | — |
| redhat enterprise_linux_for_arm_64_eus | 9.4_aarch64 | — |
| redhat enterprise_linux_for_ibm_z_systems | 9.0_s390x | — |
| redhat enterprise_linux_for_ibm_z_systems_eus | 9.4_s390x | — |
| redhat enterprise_linux_for_power_little_endian | 9.0_ppc64le | — |
| redhat enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le | — |
| redhat enterprise_linux_server_aus | 9.4 | — |
| suse linux_enterprise_micro | 6.0 | — |
| debian debian_linux | 12.0 | — |
| amazon amazon_linux | 2023.0 | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp e-series_santricity_os_controller | 11.0.0 ≤ v ≤ 11.70.2 | — |
| netapp ontap | 9 | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| netapp ontap_tools | 9, 10 | — |
| freebsd freebsd | 13.2, 13.3, 14.0, 14.1 | — |
| netbsd netbsd | v ≤ 10.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.