CVE-2024-6387

high · 8.1

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

8.1

CVSS

99.5%

EPSS (exploit prob.)

100th

EPSS percentile

2024-07-01

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-364CWE-362

Affected products

Vendor	Product	Affected versions
sonicwall	sma_6200_firmware	all versions
sonicwall	sma_6200	all versions
sonicwall	sma_7200_firmware	all versions
sonicwall	sma_7200	all versions
arista	eos	>= 4.32.0, <= 4.32.1f
canonical	ubuntu_linux	23.10
canonical	ubuntu_linux	24.04
almalinux	almalinux	9.0
sonicwall	sma_6210_firmware	all versions
sonicwall	sma_6210	all versions
sonicwall	sma_7210_firmware	all versions
sonicwall	sma_7210	all versions
sonicwall	sma_8200v_firmware	all versions
sonicwall	sma_8200v	all versions
sonicwall	sra_ex_7000_firmware	all versions
sonicwall	sra_ex_7000	all versions
netapp	a1k_firmware	all versions
netapp	a1k	all versions
netapp	a70_firmware	all versions
netapp	a70	all versions
netapp	a90_firmware	all versions
netapp	a90	all versions
netapp	a700s_firmware	all versions
netapp	a700s	all versions
netapp	8300_firmware	all versions
netapp	8300	all versions
netapp	8700_firmware	all versions
netapp	8700	all versions
netapp	a400_firmware	all versions
netapp	a400	all versions
netapp	c400_firmware	all versions
netapp	c400	all versions
netapp	a250_firmware	all versions
netapp	a250	all versions
netapp	500f_firmware	all versions
netapp	500f	all versions
netapp	c250_firmware	all versions
netapp	c250	all versions
netapp	a800_firmware	all versions
netapp	a800	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-6387