{
    "id": "CVE-2024-6387",
    "published": "2024-07-01 13:15:06",
    "last_modified": "2026-09-01 12:17:13",
    "cvss_score": "8.1",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-364",
    "description": "A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",
    "epss_score": "0.99506",
    "epss_percentile": "0.99944",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:07:41",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "almalinux",
            "product": "almalinux"
        },
        {
            "vendor": "arista",
            "product": "eos"
        },
        {
            "vendor": "canonical",
            "product": "ubuntu_linux"
        },
        {
            "vendor": "netapp",
            "product": "500f"
        },
        {
            "vendor": "netapp",
            "product": "500f_firmware"
        },
        {
            "vendor": "netapp",
            "product": "8300"
        },
        {
            "vendor": "netapp",
            "product": "8300_firmware"
        },
        {
            "vendor": "netapp",
            "product": "8700"
        },
        {
            "vendor": "netapp",
            "product": "8700_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a1k"
        },
        {
            "vendor": "netapp",
            "product": "a1k_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a250"
        },
        {
            "vendor": "netapp",
            "product": "a250_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a400"
        },
        {
            "vendor": "netapp",
            "product": "a400_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a70"
        },
        {
            "vendor": "netapp",
            "product": "a70_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a700s"
        },
        {
            "vendor": "netapp",
            "product": "a700s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a800"
        },
        {
            "vendor": "netapp",
            "product": "a800_firmware"
        },
        {
            "vendor": "netapp",
            "product": "a90"
        },
        {
            "vendor": "netapp",
            "product": "a90_firmware"
        },
        {
            "vendor": "netapp",
            "product": "c250"
        },
        {
            "vendor": "netapp",
            "product": "c250_firmware"
        },
        {
            "vendor": "netapp",
            "product": "c400"
        },
        {
            "vendor": "netapp",
            "product": "c400_firmware"
        },
        {
            "vendor": "netapp",
            "product": "c800_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_6200"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_6200_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_6210"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_6210_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_7200"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_7200_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_7210"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_7210_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_8200v"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_8200v_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sra_ex_7000"
        },
        {
            "vendor": "sonicwall",
            "product": "sra_ex_7000_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "52269",
            "title": "OpenSSH server (sshd) 9.8p1 - Race Condition",
            "date": "2025-04-22",
            "url": "https://www.exploit-db.com/exploits/52269"
        }
    ],
    "refs_list": [
        "https://access.redhat.com/errata/RHSA-2024:4312",
        "https://access.redhat.com/errata/RHSA-2024:4340",
        "https://access.redhat.com/errata/RHSA-2024:4389",
        "https://access.redhat.com/errata/RHSA-2024:4469",
        "https://access.redhat.com/errata/RHSA-2024:4474",
        "https://access.redhat.com/errata/RHSA-2024:4479",
        "https://access.redhat.com/errata/RHSA-2024:4484",
        "https://access.redhat.com/security/cve/CVE-2024-6387",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2294604",
        "https://santandersecurityresearch.github.io/blog/sshing_the_masses.html",
        "https://www.openssh.com/txt/release-9.8",
        "https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt",
        "http://seclists.org/fulldisclosure/2024/Jul/18",
        "http://seclists.org/fulldisclosure/2024/Jul/19",
        "http://seclists.org/fulldisclosure/2024/Jul/20",
        "http://www.openwall.com/lists/oss-security/2024/07/01/12",
        "http://www.openwall.com/lists/oss-security/2024/07/01/13",
        "http://www.openwall.com/lists/oss-security/2024/07/02/1",
        "http://www.openwall.com/lists/oss-security/2024/07/03/1",
        "http://www.openwall.com/lists/oss-security/2024/07/03/11",
        "http://www.openwall.com/lists/oss-security/2024/07/03/2",
        "http://www.openwall.com/lists/oss-security/2024/07/03/3",
        "http://www.openwall.com/lists/oss-security/2024/07/03/4",
        "http://www.openwall.com/lists/oss-security/2024/07/03/5",
        "http://www.openwall.com/lists/oss-security/2024/07/04/1"
    ]
}