high8.1Public exploit code

CVE-2024-6387

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

OpenSSH server (sshd) 9.8p1 - Race Condition2025-04-22 · remote · linux

Impact

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Affected products

Vendor	Product	Affected versions
Sonicwall	Sma 6200 Firmware	All versions
Sonicwall	Sma 7200 Firmware	All versions
Arista	Eos	from 4.32.0 through 4.32.1f
Canonical	Ubuntu Linux	Versions 23.10, 24.04, 22.04, 22.10, 23.04
Almalinux	Almalinux	Version 9.0
Sonicwall	Sma 6210 Firmware	All versions
Sonicwall	Sma 7210 Firmware	All versions
Sonicwall	Sma 8200v Firmware	All versions
Sonicwall	Sra Ex 7000 Firmware	All versions
Netapp	A1k Firmware	All versions
Netapp	A70 Firmware	All versions
Netapp	A90 Firmware	All versions

Weakness classification

CWE-364 CWE-362

Public exploit code

Impact

Affected products

Weakness classification

References