CVE-2024-6387: OpenBSD OpenSSH race condition (CVSS 8.1)

Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Netapp Active Iq Unified Managerall versions

Netapp E-series Santricity OS Controller≥ 11.0.0 ≤ 11.70.2

Netapp Ontap9

Netapp Ontap Select Deploy Administration Utilityall versions

Netapp Ontap Tools10 · 9

OpenBSD OpenSSH≥ 8.6 ≤ 9.8 · < 4.4 · 4.4 · 8.5

Redhat Openshift Container Platform4.0

Almalinux9.0

Amazon Linux2023.0

Apple macOS≥ 12.0 < 12.7.6 · ≥ 13.0 < 13.6.8 · ≥ 14.0 < 14.6

Arista Eos≥ 4.32.0 ≤ 4.32.1f

Canonical Ubuntu Linux22.04 · 22.10 · 23.04 · 23.10

Debian Linux12.0

FreeBSD13.2 · 13.3 · 14.0 · 14.1

Netapp 500f Firmwareall versions

Netapp 8300 Firmwareall versions

Netapp 8700 Firmwareall versions

Netapp A150 Firmwareall versions

Netapp A1k Firmwareall versions

Netapp A220 Firmwareall versions

Netapp A250 Firmwareall versions

Netapp A400 Firmwareall versions

Netapp A700s Firmwareall versions

Netapp A70 Firmwareall versions

Remediation

Fixed in

OpenBSD OpenSSH≥ 4.4

Apple macOS≥ 12.7.6

Patch & vendor advisories

References

https://access.redhat.com/errata/RHSA-2024:4312Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4340Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4389Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4469Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4474Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4479Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:4484Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-6387Third Party Advisory
https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/Third Party Advisory
https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/Press/Media CoverageThird Party Advisory

and 71 more references

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2024-6387 being actively exploited?

CVE-2024-6387 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 99.5%.

How severe is CVE-2024-6387?

CVE-2024-6387 has a CVSS 3.1 base score of 8.1, rated high. EPSS estimates a 99.5% probability of exploitation.

Which products are affected by CVE-2024-6387?

Affected products include Netapp Active Iq Unified Manager, Netapp E-series Santricity OS Controller, Netapp Ontap, Netapp Ontap Select Deploy Administration Utility, Netapp Ontap Tools, and 19 more.

How do I fix CVE-2024-6387?

Upgrade affected software to a fixed version, for example OpenBSD OpenSSH 4.4, Apple macOS 12.7.6 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-6387 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo