CVE-2024-6387

Published: Jul 1, 2024

Modified: May 12, 2026

PUBLISHED

CVSS v3.1

8.1

HIGH

Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Vendor	Product	Versions
Unknown	OpenSSH	affected `8.5p1 - <= 9.7p1`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:8.7p1-38.el9_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:8.7p1-38.el9_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	unaffected `0:8.7p1-12.el9_0.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:8.7p1-30.el9_2.4 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.13	unaffected `413.92.202407091321-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.14	unaffected `414.92.202407091253-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.15	unaffected `415.92.202407091355-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.16	unaffected `416.94.202407081958-0 - < *`
Red Hat	Red Hat Ceph Storage 5	All versions
Red Hat	Red Hat Ceph Storage 6	All versions
Red Hat	Red Hat Ceph Storage 7	All versions
Red Hat	Red Hat Enterprise Linux 10	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions