# CVE-2024-6387 (regreSSHion) A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. - Page: https://www.vulneraibility.com/cve/CVE-2024-6387 - CVSS: 8.1 - Known exploited: not in CISA KEV as of our last sync - EPSS: 99.51% (percentile 99.9) - Public exploit code: 1 on Exploit-DB ยท 97 GitHub proofs of concept (first 2024-07-01) - CISA SSVC: exploitation poc, automatable no, technical impact total (assessed 2024-07-02) - Weakness: CWE-364 - Published: 2024-07-01 ## Affected - sonicwall:sma_6200_firmware - sonicwall:sma_7200_firmware - arista:eos - canonical:ubuntu_linux - almalinux:almalinux - sonicwall:sma_6210_firmware - sonicwall:sma_7210_firmware - sonicwall:sma_8200v_firmware - sonicwall:sra_ex_7000_firmware - netapp:a1k_firmware - netapp:a70_firmware - netapp:a90_firmware - netapp:a700s_firmware - netapp:8300_firmware - netapp:8700_firmware - netapp:a400_firmware - netapp:c400_firmware - netapp:a250_firmware - netapp:500f_firmware - netapp:c250_firmware - netapp:a800_firmware - netapp:c800_firmware - netapp:a900_firmware - netapp:a9500_firmware - netapp:c190_firmware - netapp:a150_firmware - netapp:a220_firmware - netapp:fas2720_firmware - netapp:fas2750_firmware - netapp:fas2820_firmware ## References - [advisory] https://access.redhat.com/errata/RHSA-2024:4312 - [advisory] https://access.redhat.com/errata/RHSA-2024:4340 - [advisory] https://access.redhat.com/errata/RHSA-2024:4389 - [advisory] https://access.redhat.com/errata/RHSA-2024:4469 - [advisory] https://access.redhat.com/errata/RHSA-2024:4474 - [advisory] https://access.redhat.com/errata/RHSA-2024:4479 - [advisory] https://access.redhat.com/errata/RHSA-2024:4484 - [other] https://access.redhat.com/security/cve/CVE-2024-6387 - [other] https://bugzilla.redhat.com/show_bug.cgi?id=2294604 - [other] https://santandersecurityresearch.github.io/blog/sshing_the_masses.html - [other] https://www.openssh.com/txt/release-9.8 - [other] https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt - [other] https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387 - [other] https://www.exploit-db.com/exploits/52269 - [other] https://packetstorm.news/files/id/190587/ - [other] http://www.openwall.com/lists/oss-security/2024/07/01/12 - [other] http://www.openwall.com/lists/oss-security/2024/07/01/13 - [other] http://www.openwall.com/lists/oss-security/2024/07/02/1 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/1 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/11 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/3 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/4 - [other] http://www.openwall.com/lists/oss-security/2024/07/03/5 - [other] http://www.openwall.com/lists/oss-security/2024/07/04/1 - [other] http://www.openwall.com/lists/oss-security/2024/07/04/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/08/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/08/3 - [other] http://www.openwall.com/lists/oss-security/2024/07/09/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/09/5 - [other] http://www.openwall.com/lists/oss-security/2024/07/10/1 - [other] http://www.openwall.com/lists/oss-security/2024/07/10/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/10/3 - [other] http://www.openwall.com/lists/oss-security/2024/07/10/4 - [other] http://www.openwall.com/lists/oss-security/2024/07/10/6 - [other] http://www.openwall.com/lists/oss-security/2024/07/11/1 - [other] http://www.openwall.com/lists/oss-security/2024/07/11/3 - [other] http://www.openwall.com/lists/oss-security/2024/07/23/4 - [other] http://www.openwall.com/lists/oss-security/2024/07/23/6 - [other] http://www.openwall.com/lists/oss-security/2024/07/28/2 - [other] http://www.openwall.com/lists/oss-security/2024/07/28/3 - [other] https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/ - [other] https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/ - [other] https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server - [other] https://explore.alas.aws.amazon.com/CVE-2024-6387.html - [other] https://forum.vmssoftware.com/viewtopic.php?f=8&t=9132 - [other] https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc - [other] https://github.com/AlmaLinux/updates/issues/629 - [other] https://github.com/Azure/AKS/issues/4379 - [other] https://github.com/PowerShell/Win32-OpenSSH/discussions/2248 --- Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.