Vulnerabilityhigh
A new flaw in OpenSSH can lead to remote code execution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-6387 | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd) | 8.1 | 100% | PoC ×7 | |
| CVE-2024-6409 | how signals are handled by OpenSSH's server (sshd): If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously… | 7.0 | 28% |
From the original article
2 min read at securityaffairs.com
A vulnerability affects some versions of the OpenSSH secure networking suite, it can potentially lead to remote code execution. The vulnerability CVE-2024-6409 (CVSS score: 7. 0) impacts select versions of the OpenSSH secure networking suite, it can be exploited to achieve remote code execution (RCE).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.