CVE-2024-6387
Description
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
OpenSSH server (sshd) 9.8p1 - Race Condition
OS impact
AlmaLinux Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| 9.0 | Affected | — |
FreeBSD Affected 5 releases
| Version | Status | Fixed in |
|---|---|---|
| 14.1 | Affected | — |
| 14.0 | Affected | — |
| 13.3 | Affected | — |
| 13.2 | Affected | — |
| — | Affected | — |
macOS Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Affected | 12.7.6 |
SUSE Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Affected | — |
Ubuntu Affected 5 releases
| Version | Status | Fixed in |
|---|---|---|
| 24.04 | Affected | — |
| 23.10 | Affected | — |
| 23.04 | Affected | — |
| 22.10 | Affected | — |
| 22.04 | Affected | — |
Debian Mixed 6 releases
| Version | Status | Fixed in |
|---|---|---|
| trixie | Fixed | 1:9.7p1-7 |
| sid | Fixed | 1:9.7p1-7 |
| forky | Fixed | 1:9.7p1-7 |
| bullseye | Fixed | 0 |
| bookworm | Fixed | 1:9.2p1-2+deb12u3 |
| 12.0 | Affected | — |
Red Hat Mixed 4 releases
| Version | Status | Fixed in |
|---|---|---|
| 9.4 | Affected | — |
| 9.0_aarch64 | Affected | — |
| 9.0 | Affected | — |
| 9 | Fixed | — |
Arch Fixed 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Fixed | 9.8p1-1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| openbsd | openssh | 8.6 | |
| openbsd | openssh | 4.4 | |
| openbsd | openssh | 8.5 | |
| openbsd | openssh | {"endExcluding":"4.4"} | 4.4 |
| redhat | openshift_container_platform | 4.0 | |
| netapp | active_iq_unified_manager | - | |
| netapp | e-series_santricity_os_controller | {"startIncluding":"11.0.0","endIncluding":"11.70.2"} | |
| netapp | ontap | 9 | |
| netapp | ontap_select_deploy_administration_utility | - | |
| netapp | ontap_tools | 9 | |
| netapp | ontap_tools | 10 | |
References
- https://access.redhat.com/errata/RHSA-2024:4312
- https://security.archlinux.org/ASA-202407-1
- https://access.redhat.com/errata/RHSA-2024:4340
- https://access.redhat.com/errata/RHSA-2024:4389
- https://access.redhat.com/errata/RHSA-2024:4469
- https://access.redhat.com/errata/RHSA-2024:4474
- https://access.redhat.com/errata/RHSA-2024:4479
- https://access.redhat.com/errata/RHSA-2024:4484
- https://access.redhat.com/security/cve/CVE-2024-6387
- https://bugzilla.redhat.com/show_bug.cgi?id=2294604
- https://santandersecurityresearch.github.io/blog/sshing_the_masses.html
- https://www.openssh.com/txt/release-9.8
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
- http://seclists.org/fulldisclosure/2024/Jul/18
- http://seclists.org/fulldisclosure/2024/Jul/19
- http://seclists.org/fulldisclosure/2024/Jul/20
- http://www.openwall.com/lists/oss-security/2024/07/01/12
- http://www.openwall.com/lists/oss-security/2024/07/01/13
- http://www.openwall.com/lists/oss-security/2024/07/02/1
- http://www.openwall.com/lists/oss-security/2024/07/03/1
- http://www.openwall.com/lists/oss-security/2024/07/03/11
- http://www.openwall.com/lists/oss-security/2024/07/03/2
- http://www.openwall.com/lists/oss-security/2024/07/03/3
- http://www.openwall.com/lists/oss-security/2024/07/03/4
- http://www.openwall.com/lists/oss-security/2024/07/03/5
CWEs
CWE-364 CWE-362
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.