Vulnerabilitycritical
A FreeBSD flaw could allow remote code execution, patch it now!
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-6387 | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd) | 8.1 | 100% | PoC ×7 | |
| CVE-2024-7589 | A signal handler in sshd(8) may call a logging function that is not async-signal-safe | 8.1 | 2% |
From the original article
1 min read at securityaffairs.comFreeBSD Project maintainers addressed a high-severity flaw in OpenSSH that could allow remote code execution with elevated privileges. The maintainers of the FreeBSD Project have released urgent security updates to address a high-severity flaw, tracked as CVE-2024-7589, (CVSS score of 7. 4) in OpenSSH.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.