Back to CVE records
High 8.1Published Jul 1, 2024
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Updated under an hour ago ()
Does this affect you?
It affects Red Hat Enterprise Linux 9 and 58 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
- CVSS
- 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-364
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- redhat
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Red Hat Red Hat Enterprise Linux 9 redhat:enterprise_linux | from 0:8.7p1-38.el9_4.1 not affected | CNA record |
from 0:8.7p1-12.el9_0.1 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support redhat:rhel_eus | from 0:8.7p1-30.el9_2.4 not affected | CNA record |
Red Hat Red Hat OpenShift Container Platform 4.13 redhat:openshift | from 413.92.202407091321-0 not affected | CNA record |
Red Hat Red Hat Ceph Storage 5 redhat:ceph_storage | 5 | CNA record |
Siemens Industrial Edge Management OS (IEM-OS) siemens:industrial_edge_management_os_iem_os (from the name) | all versions | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.5 | CISA ADP |
Siemens SINAMICS IIoT module siemens:sinamics_iiot_module (from the name) | before V1.0 HF1 | CISA ADP |
Siemens SINEMA Remote Connect Server siemens:sinema_remote_connect_server (from the name) | before V3.2 SP2 | CISA ADP |
Siemens SINUMERIK ONE siemens:sinumerik_one (from the name) | before V6.24 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.5 | CISA ADP |
sonicwall sma_6200_firmware sonicwall:sma_6200_firmware | all versions | NVD |
sonicwall sma_7200_firmware sonicwall:sma_7200_firmware | all versions | NVD |
arista eos arista:eos | from 4.32.0 through 4.32.1f | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 23.10; 24.04; 22.04; 22.10; 23.04 | NVD |
almalinux almalinux almalinux:almalinux | 9.0 | NVD |
sonicwall sma_6210_firmware sonicwall:sma_6210_firmware | all versions | NVD |
sonicwall sma_7210_firmware sonicwall:sma_7210_firmware | all versions | NVD |
sonicwall sma_8200v_firmware sonicwall:sma_8200v_firmware | all versions | NVD |
sonicwall sra_ex_7000_firmware sonicwall:sra_ex_7000_firmware | all versions | NVD |
netapp a1k_firmware netapp:a1k_firmware | all versions | NVD |
netapp a70_firmware netapp:a70_firmware | all versions | NVD |
netapp a90_firmware netapp:a90_firmware | all versions | NVD |
netapp a700s_firmware netapp:a700s_firmware | all versions | NVD |
netapp 8300_firmware netapp:8300_firmware | all versions | NVD |
netapp 8700_firmware netapp:8700_firmware | all versions | NVD |
netapp a400_firmware netapp:a400_firmware | all versions | NVD |
netapp c400_firmware netapp:c400_firmware | all versions | NVD |
netapp a250_firmware netapp:a250_firmware | all versions | NVD |
netapp 500f_firmware netapp:500f_firmware | all versions | NVD |
netapp c250_firmware netapp:c250_firmware | all versions | NVD |
netapp a800_firmware netapp:a800_firmware | all versions | NVD |
netapp c800_firmware netapp:c800_firmware | all versions | NVD |
netapp a900_firmware netapp:a900_firmware | all versions | NVD |
netapp a9500_firmware netapp:a9500_firmware | all versions | NVD |
netapp c190_firmware netapp:c190_firmware | all versions | NVD |
netapp a150_firmware netapp:a150_firmware | all versions | NVD |
netapp a220_firmware netapp:a220_firmware | all versions | NVD |
netapp fas2720_firmware netapp:fas2720_firmware | all versions | NVD |
netapp fas2750_firmware netapp:fas2750_firmware | all versions | NVD |
netapp fas2820_firmware netapp:fas2820_firmware | all versions | NVD |
netapp bootstrap_os netapp:bootstrap_os | all versions | NVD |
apple macos apple:macos | from 12.0 before 12.7.6; from 13.0 before 13.6.8; from 14.0 before 14.6 | NVD |
openbsd openssh openbsd:openssh | before 4.4; from 8.6 through 9.8; 4.4; 8.5; 8.6 | NVD |
redhat openshift_container_platform redhat:openshift_container_platform | 4.0 | NVD |
redhat enterprise_linux redhat:enterprise_linux | 9.0 | NVD |
redhat enterprise_linux_eus redhat:enterprise_linux_eus | 9.4 | NVD |
redhat enterprise_linux_for_arm_64 redhat:enterprise_linux_for_arm_64 | 9.0_aarch64 | NVD |
redhat enterprise_linux_for_arm_64_eus redhat:enterprise_linux_for_arm_64_eus | 9.4_aarch64 | NVD |
redhat enterprise_linux_for_ibm_z_systems redhat:enterprise_linux_for_ibm_z_systems | 9.0_s390x | NVD |
redhat enterprise_linux_for_ibm_z_systems_eus redhat:enterprise_linux_for_ibm_z_systems_eus | 9.4_s390x | NVD |
redhat enterprise_linux_for_power_little_endian redhat:enterprise_linux_for_power_little_endian | 9.0_ppc64le | NVD |
redhat enterprise_linux_for_power_little_endian_eus redhat:enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le | NVD |
redhat enterprise_linux_server_aus redhat:enterprise_linux_server_aus | 9.4 | NVD |
suse linux_enterprise_micro suse:linux_enterprise_micro | 6.0 | NVD |
debian debian_linux debian:debian_linux | 12.0 | NVD |
amazon amazon_linux amazon:amazon_linux | 2023.0 | NVD |
netapp active_iq_unified_manager netapp:active_iq_unified_manager | all versions | NVD |
netapp e-series_santricity_os_controller netapp:e-series_santricity_os_controller | from 11.0.0 through 11.70.2 | NVD |
References
- https://access.redhat.com/errata/RHSA-2024:4312vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4340vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4389vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4469vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4474vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4479vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/errata/RHSA-2024:4484vendor-advisory, x-refsource-redhat, third-party-advisory
- https://access.redhat.com/security/cve/CVE-2024-6387vdb-entry, x-refsource-redhat, third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294604issue-tracking, x-refsource-redhat, third-party-advisory
- https://santandersecurityresearch.github.io/blog/sshing_the_masses.htmlexploit, third-party-advisory
- https://www.openssh.com/txt/release-9.8release-notes, third-party-advisory
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txtexploit, third-party-advisory
- http://seclists.org/fulldisclosure/2024/Jul/18mailing-list
- http://seclists.org/fulldisclosure/2024/Jul/19mailing-list
- http://seclists.org/fulldisclosure/2024/Jul/20mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/01/12mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/01/13mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/02/1mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/03/1mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/03/11exploit, mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/03/2mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/03/3mailing-list, patch
- http://www.openwall.com/lists/oss-security/2024/07/03/4mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/03/5mailing-list
- http://www.openwall.com/lists/oss-security/2024/07/04/1mailing-list
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.