Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024
On July 1, 2024, the Qualys Threat Research Unit (TRU) disclosed an unauthenticated, remote code execution vulnerability that affects the OpenSSH server (sshd) in glibc-based Linux systems. CVE-2024-6387: A signal handler race condition was found in sshd, where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then the sshd SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). For a description of this vulnerability, see the Qualys Security Advisory ["https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Bug Search Toolexternal
- Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024self
- Cisco Firewall Best Practices - Securing the Management Planeexternal
- Cisco Guide to Securing NX-OS Software Devices - Limiting Access to the Network with Infrastructure ACLsexternal
- Cisco Security Vulnerability Policyexternal
- fixed software releasesexternal
- Cisco UCS Hardening Guide - Limit Network Access with ACLs on Routers and Firewallsexternal
remediations (3)
- FixedCisco Catalyst SD-WAN
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst SD-WAN Controller
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst SD-WAN Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan