CVE-2024-6387

Media report

Exploit

EPSS 38.58%
Published 01.07.2024 13:15:06
Last modified 30.09.2025 13:52:23
Source secalert@redhat.com
Teams watchlist Login
Open Login

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Affected products Warnungen 0 Metrics 3 CWE 2 References 82

Data is provided by the National Vulnerability Database (NVD)

Sonicwall ≫ Sma 6200 Firmware Version-

Sonicwall ≫ Sma 6200 Version-

Sonicwall ≫ Sma 7200 Firmware Version-

Sonicwall ≫ Sma 7200 Version-

Arista ≫ Eos Version >= 4.32.0 <= 4.32.1f

Canonical ≫ Ubuntu Linux Version23.10

Canonical ≫ Ubuntu Linux Version24.04 SwEditionlts

Almalinux ≫ Almalinux Version9.0 Update-

Sonicwall ≫ Sma 6210 Firmware Version-

Sonicwall ≫ Sma 6210 Version-

Sonicwall ≫ Sma 7210 Firmware Version-

Sonicwall ≫ Sma 7210 Version-

Sonicwall ≫ Sma 8200v Firmware Version-

Sonicwall ≫ Sma 8200v Version-

Sonicwall ≫ Sra Ex 7000 Firmware Version-

Sonicwall ≫ Sra Ex 7000 Version-

Netapp ≫ A1k Firmware Version-

Netapp ≫ A1k Version-

Netapp ≫ A70 Firmware Version-

Netapp ≫ A70 Version-

Netapp ≫ A90 Firmware Version-

Netapp ≫ A90 Version-

Netapp ≫ A700s Firmware Version-

Netapp ≫ A700s Version-

Netapp ≫ 8300 Firmware Version-

Netapp ≫ 8300 Version-

Netapp ≫ 8700 Firmware Version-

Netapp ≫ 8700 Version-

Netapp ≫ A400 Firmware Version-

Netapp ≫ A400 Version-

Netapp ≫ C400 Firmware Version-

Netapp ≫ C400 Version-

Netapp ≫ A250 Firmware Version-

Netapp ≫ A250 Version-

Netapp ≫ 500f Firmware Version-

Netapp ≫ 500f Version-

Netapp ≫ C250 Firmware Version-

Netapp ≫ C250 Version-

Netapp ≫ A800 Firmware Version-

Netapp ≫ A800 Version-

Netapp ≫ C800 Firmware Version-

Netapp ≫ C800 Version-

Netapp ≫ A900 Firmware Version-

Netapp ≫ A900 Version-

Netapp ≫ A9500 Firmware Version-

Netapp ≫ A9500 Version-

Netapp ≫ C190 Firmware Version-

Netapp ≫ C190 Version-

Netapp ≫ A150 Firmware Version-

Netapp ≫ A150 Version-

Netapp ≫ A220 Firmware Version-

Netapp ≫ A220 Version-

Netapp ≫ Fas2720 Firmware Version-

Netapp ≫ Fas2720 Version-

Netapp ≫ Fas2750 Firmware Version-

Netapp ≫ Fas2750 Version-

Netapp ≫ Fas2820 Firmware Version-

Netapp ≫ Fas2820 Version-

Netapp ≫ Bootstrap Os Version-

Netapp ≫ Hci Compute Node Version-

Apple ≫ macOS Version >= 12.0 < 12.7.6

Apple ≫ macOS Version >= 13.0 < 13.6.8

Apple ≫ macOS Version >= 14.0 < 14.6

Openbsd ≫ Openssh Version < 4.4

Openbsd ≫ Openssh Version >= 8.6 <= 9.8

Openbsd ≫ Openssh Version4.4 Update-

Openbsd ≫ Openssh Version8.5 Updatep1

Openbsd ≫ Openssh Version8.6 Update-

Redhat ≫ Openshift Container Platform Version4.0

Redhat ≫ Enterprise Linux Version9.0

Redhat ≫ Enterprise Linux Eus Version9.4

Redhat ≫ Enterprise Linux For Arm 64 Version9.0_aarch64

Redhat ≫ Enterprise Linux For Arm 64 Eus Version9.4_aarch64

Redhat ≫ Enterprise Linux For Ibm Z Systems Version9.0_s390x

Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version9.4_s390x

Redhat ≫ Enterprise Linux For Power Little Endian Version9.0_ppc64le

Redhat ≫ Enterprise Linux For Power Little Endian Eus Version9.4_ppc64le

Redhat ≫ Enterprise Linux Server Aus Version9.4

Suse ≫ Linux Enterprise Micro Version6.0

Debian ≫ Debian Linux Version12.0

Canonical ≫ Ubuntu Linux Version22.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version22.10 SwEdition-

Canonical ≫ Ubuntu Linux Version23.04 SwEditionlts

Amazon ≫ Amazon Linux Version2023.0

Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere

Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.70.2

Netapp ≫ Ontap Version9

Netapp ≫ Ontap Select Deploy Administration Utility Version-

Netapp ≫ Ontap Tools Version9 SwPlatformvmware_vsphere

Netapp ≫ Ontap Tools Version10 SwPlatformvmware_vsphere

Freebsd ≫ Freebsd Version13.2 Update-

Freebsd ≫ Freebsd Version13.2 Updatep1

Freebsd ≫ Freebsd Version13.2 Updatep10

Freebsd ≫ Freebsd Version13.2 Updatep11

Freebsd ≫ Freebsd Version13.2 Updatep2

Freebsd ≫ Freebsd Version13.2 Updatep3

Freebsd ≫ Freebsd Version13.2 Updatep4

Freebsd ≫ Freebsd Version13.2 Updatep5

Freebsd ≫ Freebsd Version13.2 Updatep6

Freebsd ≫ Freebsd Version13.2 Updatep7

Freebsd ≫ Freebsd Version13.2 Updatep8

Freebsd ≫ Freebsd Version13.2 Updatep9

Freebsd ≫ Freebsd Version13.3 Update-

Freebsd ≫ Freebsd Version13.3 Updatep1

Freebsd ≫ Freebsd Version13.3 Updatep2

Freebsd ≫ Freebsd Version13.3 Updatep3

Freebsd ≫ Freebsd Version14.0 Update-

Freebsd ≫ Freebsd Version14.0 Updatebeta5

Freebsd ≫ Freebsd Version14.0 Updatep1

Freebsd ≫ Freebsd Version14.0 Updatep2

Freebsd ≫ Freebsd Version14.0 Updatep3

Freebsd ≫ Freebsd Version14.0 Updatep4

Freebsd ≫ Freebsd Version14.0 Updatep5

Freebsd ≫ Freebsd Version14.0 Updatep6

Freebsd ≫ Freebsd Version14.0 Updatep7

Freebsd ≫ Freebsd Version14.0 Updaterc3

Freebsd ≫ Freebsd Version14.0 Updaterc4-p1

Freebsd ≫ Freebsd Version14.1 Update-

Freebsd ≫ Freebsd Version14.1 Updatep1

Netbsd ≫ Netbsd Version <= 10.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	38.58%	0.971

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
secalert@redhat.com	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

CWE-364 Signal Handler Race Condition

The product uses a signal handler that introduces a race condition.

http://www.openwall.com/lists/oss-security/2024/07/28/3

Mailing List

http://www.openwall.com/lists/oss-security/2024/07/03/3

Patch

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/18

Mailing List

https://support.apple.com/kb/HT214119

Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/07/10/3