Summary A critical vulnerability (CVE-2024-6387) named regreSSHion has been discovered in OpenSSH's server (sshd), which allows for remote code execution (RCE) due to a signal handler race condition triggered when a client fails to authenticate withi… Read on blog or Reader Kudelski Security Research Read on blog or Reader Remote Code Execution in OpenSSH's Server (CVE-2024-6387) – regreSSHion By KS Threat Research on July 1, 2024 Summary A critical vulnerability (CVE-2024-6387) named regreSSHion has been discovered in OpenSSH's server (sshd), which allows for remote code execution (RCE) due to a signal handler race condition triggered when a client fails to authenticate within a specified time frame (LoginGraceTime). This vulnerability was inadvertently reintroduced in October 2020 and affects OpenSSH versions from 8.5p1 […] Continue reading Comment You can also reply to this email to leave a comment.

Kudelski Security Research © 2024. Manage your email settings or unsubscribe. Get the Jetpack app Subscribe, bookmark, and get real‑time notifications - all from one app! Automattic, Inc. 60 29th St. #343, San Francisco, CA 94110