CVE-2024-6387
Fixed in a distro release EPSS 100%CVSS 8.1
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Ceph Storage 7, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4, Siemens Industrial Edge Management OS (IEM-OS), Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SINAMICS IIoT module, Siemens SINEMA Remote Connect Server, Siemens SINUMERIK ONE, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | openssh | 8.7p1-38.el9_4.1 |
| AlmaLinux 9 | openssh-askpass | 8.7p1-38.el9_4.1 |
| AlmaLinux 9 | openssh-clients | 8.7p1-38.el9_4.1 |
| AlmaLinux 9 | openssh-keycat | 8.7p1-38.el9_4.1 |
| AlmaLinux 9 | openssh-server | 8.7p1-38.el9_4.1 |
| AlmaLinux 9 | pam_ssh_agent_auth | 0.10.4-5.38.el9_4.1 |
| Alpine 3.17 | openssh | 9.1_p1-r6 |
| Alpine 3.18 | openssh | 9.3_p2-r2 |
| Alpine 3.19 | openssh | 9.6_p1-r1 |
| Alpine 3.20 | openssh | 9.7_p1-r4 |
| Alpine 3.21 | openssh | 9.8_p1-r0 |
| Alpine 3.22 | openssh | 9.8_p1-r0 |
| Alpine 3.23 | openssh | 9.8_p1-r0 |
| Alpine 3.24 | openssh | 9.8_p1-r0 |
| Arch Linux | openssh | 9.8p1-1 |
| Debian 12 | openssh | 1:9.2p1-2+deb12u3 |
| Debian 13 | openssh | 1:9.7p1-7 |
| Debian 14 | openssh | 1:9.7p1-7 |
| Red Hat Enterprise Linux 9 | openssh | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-askpass | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-askpass-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-clients | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-clients-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-debugsource | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-keycat | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-keycat-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-server | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-server-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | openssh-sk-dummy-debuginfo | 0:8.7p1-38.el9_4.1 |
| Red Hat Enterprise Linux 9 | pam_ssh_agent_auth | 0:0.10.4-5.38.el9_4.1 |
| Red Hat Enterprise Linux 9 | pam_ssh_agent_auth-debuginfo | 0:0.10.4-5.38.el9_4.1 |
| Red Hat rhel e4s 9.0 | openssh | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-askpass | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-askpass-debuginfo | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-clients | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-clients-debuginfo | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-debuginfo | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-debugsource | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-keycat | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-keycat-debuginfo | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-server | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | openssh-server-debuginfo | 0:8.7p1-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | pam_ssh_agent_auth | 0:0.10.4-4.12.el9_0.1 |
| Red Hat rhel e4s 9.0 | pam_ssh_agent_auth-debuginfo | 0:0.10.4-4.12.el9_0.1 |
| Red Hat rhel eus 9.2 | openssh | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-askpass | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-askpass-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-clients | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-clients-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-debugsource | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-keycat | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-keycat-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-server | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-server-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | openssh-sk-dummy-debuginfo | 0:8.7p1-30.el9_2.4 |
| Red Hat rhel eus 9.2 | pam_ssh_agent_auth | 0:0.10.4-5.30.el9_2.4 |
| Red Hat rhel eus 9.2 | pam_ssh_agent_auth-debuginfo | 0:0.10.4-5.30.el9_2.4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | openssh | 9.6p1-150600.6.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | openssh-askpass-gnome | 9.6p1-150600.6.3.1 |
| SUSE Linux Micro 6.0 | openssh | 9.6p1-2.1 |
| Ubuntu 22.04 LTS | openssh | 1:8.9p1-3ubuntu0.10 |
| Ubuntu 24.04 LTS | openssh | 1:9.6p1-3ubuntu13.3 |
| openSUSE Leap 15.6 | openssh | 9.6p1-150600.6.3.1 |
| openSUSE Leap 15.6 | openssh-askpass-gnome | 9.6p1-150600.6.3.1 |
| openSUSE Tumbleweed | openssh | 9.6p1-10.1 |