peter bassill · operator
$ cve CVE-2024-6387 JSON

CVE-2024-6387 EXPLOIT

8.1
HIGH · CVSS 3.1 · EPSS 99.5% (pctl 100)

Patch early

A public exploit exists.

Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Scoring

CVSS8.1 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS99.51% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-364
On CISA KEVno
Public exploityes
Published2024-07-01
Last modified2026-09-01

Affected (40)

VendorProduct
almalinuxalmalinux
aristaeos
canonicalubuntu linux
netapp500f
netapp500f firmware
netapp8300
netapp8300 firmware
netapp8700
netapp8700 firmware
netappa1k
netappa1k firmware
netappa250
netappa250 firmware
netappa400
netappa400 firmware
netappa70
netappa70 firmware
netappa700s
netappa700s firmware
netappa800
netappa800 firmware
netappa90
netappa90 firmware
netappc250
netappc250 firmware
netappc400
netappc400 firmware
netappc800 firmware
sonicwallsma 6200
sonicwallsma 6200 firmware
sonicwallsma 6210
sonicwallsma 6210 firmware
sonicwallsma 7200
sonicwallsma 7200 firmware
sonicwallsma 7210
sonicwallsma 7210 firmware
sonicwallsma 8200v
sonicwallsma 8200v firmware
sonicwallsra ex 7000
sonicwallsra ex 7000 firmware

Public exploits

SourceTitleDate
exploit-dbOpenSSH server (sshd) 9.8p1 - Race Condition2025-04-22

References

→ the Explorer  ·  watch your stack  ·  NVD