{"id":29724,"date":"2024-07-02T02:47:28","date_gmt":"2024-07-02T02:47:28","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=29724"},"modified":"2026-04-17T18:07:37","modified_gmt":"2026-04-17T18:07:37","slug":"openssh-remote-code-execution-vulnerability-cve-2024-6387-notification","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/openssh-remote-code-execution-vulnerability-cve-2024-6387-notification\/","title":{"rendered":"OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Notification"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

Recently, NSFOCUS CERT detected that OpenSSH issued a security announcement and fixed the remote code execution vulnerability of OpenSSH (CVE-2024-6387). Due to a signal handler race condition issue in OpenSSH Server (sshd) under the default configuration, if the client does not authenticate within seconds of LoginGraceTime (120 seconds by default and 600 seconds in older versions of OpenSSH), the SIGALRM handler for sshd will be called asynchronously. The signal handler calls various non-async-signal-safe functions, such as syslog(), which can be exploited by an unauthenticated attacker to execute arbitrary code as root on glibc-based Linux systems. At present, the vulnerability details and PoC have been disclosed. The affected users are advised to take measures for protection as soon as possible.<\/p>\n\n\n\n

Reference link:<\/p>\n\n\n\n

https:\/\/www.openssh.com\/txt\/release-9.8<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected Version<\/strong><\/p>\n\n\n\n

8.5p1 <= OpenSSH < 9.8p1<\/p>\n\n\n\n

Note: This vulnerability was reintroduced to CVE-2006-5051 in October 2020.<\/p>\n\n\n\n

Unaffected Version<\/strong><\/p>\n\n\n\n