{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://www.openssh.com/","packageName":"OpenSSH","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThanOrEqual":"9.7p1","status":"affected","version":"8.5p1","versionType":"custom"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.7p1-38.el9_4.1","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.7p1-12.el9_0.1","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.7p1-30.el9_2.4","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.13","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"413.92.202407091321-0","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.14","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"414.92.202407091253-0","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.15","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"415.92.202407091355-0","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.16","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"416.94.202407081958-0","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Ceph Storage 5","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Ceph Storage 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Ceph Storage 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssh","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","product":"Industrial Edge Management OS (IEM-OS)","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SINAMICS IIoT module","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V1.0 HF1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SINEMA Remote Connect Server","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.2 SP2","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SINUMERIK ONE","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V6.24","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}],"cveId":"CVE-2024-6387","cwes":["CWE-364"],"description":"A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","epss":{"date":"2026-11-06","percentile":0.99945,"score":0.99506},"exploits":[],"kev":null,"metrics":[{"score":8.1,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793996509972,"publishedAt":1719837445431,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4312"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4340"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4389"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4469"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4474"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4479"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:4484"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2024-6387"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294604"},{"source":"CNA: redhat","tags":[],"url":"https://santandersecurityresearch.github.io/blog/sshing_the_masses.html"},{"source":"CNA: redhat","tags":[],"url":"https://www.openssh.com/txt/release-9.8"},{"source":"CNA: redhat","tags":[],"url":"https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"},{"source":"ADP: CVE","tags":[],"url":"https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387"},{"source":"ADP: CVE","tags":[],"url":"https://www.exploit-db.com/exploits/52269"},{"source":"ADP: CVE","tags":[],"url":"https://packetstorm.news/files/id/190587/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/01/12"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/01/13"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/02/1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/11"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/3"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/4"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/03/5"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/04/1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/04/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/08/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/08/3"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/09/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/09/5"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/10/1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/10/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/10/3"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/10/4"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/10/6"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/11/1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/11/3"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/23/4"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/23/6"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/28/2"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2024/07/28/3"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4312"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4340"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4389"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4469"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4474"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4479"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:4484"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2024-6387"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294604"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://explore.alas.aws.amazon.com/CVE-2024-6387.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://forum.vmssoftware.com/viewtopic.php?f=8&t=9132"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/AlmaLinux/updates/issues/629"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/Azure/AKS/issues/4379"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/PowerShell/Win32-OpenSSH/discussions/2248"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/PowerShell/Win32-OpenSSH/issues/2249"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/microsoft/azurelinux/issues/9555"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/oracle/oracle-linux/issues/149"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/rapier1/hpn-ssh/issues/87"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://github.com/zgzhang/cve-2024-6387-poc"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/thread/23BF5BMGFVEVUI2WNVAGMLKT557EU7VY/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041431.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://news.ycombinator.com/item?id=40843778"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://santandersecurityresearch.github.io/blog/sshing_the_masses.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security-tracker.debian.org/tracker/CVE-2024-6387"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20240701-0001/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://sig-security.rocky.page/issues/CVE-2024-6387/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://stackdiary.com/openssh-race-condition-in-sshd-allows-remote-code-execution/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://ubuntu.com/security/CVE-2024-6387"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://ubuntu.com/security/notices/USN-6859-1"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.openssh.com/txt/release-9.8"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.splunk.com/en_us/blog/security/cve-2024-6387-regresshion-vulnerability.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.suse.com/security/cve/CVE-2024-6387.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.theregister.com/2024/07/01/regresshion_openssh/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://support.apple.com/kb/HT214119"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://support.apple.com/kb/HT214118"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://support.apple.com/kb/HT214120"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://seclists.org/fulldisclosure/2024/Jul/20"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://seclists.org/fulldisclosure/2024/Jul/18"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"http://seclists.org/fulldisclosure/2024/Jul/19"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-446545.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"The below process can protect against a Remote Code Execution attack by disabling the LoginGraceTime parameter on Red Hat Enterprise Linux 9. However, the sshd server is still vulnerable to a Denial of Service if an attacker exhausts all the connections.\n\n1) As root user, open the /etc/ssh/sshd_config\n2) Add or edit the parameter configuration:\n~~~\nLoginGraceTime 0\n~~~\n3) Save and close the file\n4) Restart the sshd daemon:\n~~~\nsystemctl restart sshd.service\n~~~\n\nSetting LoginGraceTime to 0 disables the SSHD server's ability to drop connections if authentication is not completed within the specified timeout. If this mitigation is implemented, it is highly recommended to use a tool like 'fail2ban' alongside a firewall to monitor log files and manage connections appropriately.\n\nIf any of the mitigations mentioned above is used, please note that the removal of LoginGraceTime parameter from sshd_config is not automatic when the updated package is installed."}],"revision":"9642204e584094dc2b8d50965beef354ecd162f7c8732ede1a95d866ef2d1060","sources":[{"modifiedAt":1793996509972,"name":"CNA: redhat","retrievedAt":1793999311199,"url":"https://www.cve.org/CVERecord?id=CVE-2024-6387"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793999328641,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-6387"}],"ssvc":{"assessedAt":1719926314695,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Openssh: regresshion - race condition in ssh allows rce/dos","updatedAt":1793999328641}