Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-6387

🗓️ 01 Jul 2024 13:15:06Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 176 Views

OpenSSH's server (sshd) has a security regression (CVE-2006-5051) that allows an unauthenticated remote attacker to trigger a race condition by failing to authenticate within a set time period

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.5 is affected by a arbitrary code execution in OpenSSH server [CVE-2024-6387]
23 Jul 202421:10
–ibm
IBM Security Bulletins		Security Bulletin: OpenSSH for IBM i is vulnerable to an attacker executing arbitrary code due to a signal handler race condition. [CVE-2024-6387]
28 Aug 202422:02
–ibm
IBM Security Bulletins		Security Bulletin: IBM Data Virtualization on Cloud Pak for Data is vulnerable to OpenSSH vulnerability CVE-2024-6387
10 Aug 202403:11
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in OpenSSH
5 Sep 202421:46
–ibm
IBM Security Bulletins		Security Bulletin: IBM watsonx Orchestrate for IBM Cloud Pak for Data affected by vulnerability in OpenSSH CVE-2024-6387
6 Aug 202419:15
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to OpenSSH arbitrary code execution vulnerability [CVE-2024-6387]
21 Aug 202414:47
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in OpenSSH and OpenSSL affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
15 Apr 202503:54
–ibm
IBM Security Bulletins		Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-6387) due to OpenSSH
9 Jul 202422:03
–ibm
IBM Security Bulletins		Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities
4 Feb 202518:06
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to OpenSSH arbitrary code execution vulnerability (CVE-2024-6387)
28 Jan 202522:08
–ibm
Rows per page
NVD
Node
sonicwallsma_6200_firmwareMatch-
AND
sonicwallsma_6200Match-
Node
sonicwallsma_7200_firmwareMatch-
AND
sonicwallsma_7200Match-
Node
aristaeosRange4.32.0–4.32.1f
Node
canonicalubuntu_linuxMatch23.10
OR
canonicalubuntu_linuxMatch24.04lts
Node
almalinuxalmalinuxMatch9.0-
Node
sonicwallsma_6210_firmwareMatch-
AND
sonicwallsma_6210Match-
Node
sonicwallsma_7210_firmwareMatch-
AND
sonicwallsma_7210Match-
Node
sonicwallsma_8200v_firmwareMatch-
AND
sonicwallsma_8200vMatch-
Node
sonicwallsra_ex_7000_firmwareMatch-
AND
sonicwallsra_ex_7000Match-
Node
netappa1k_firmwareMatch-
AND
netappa1kMatch-
Node
netappa70_firmwareMatch-
AND
netappa70Match-
Node
netappa90_firmwareMatch-
AND
netappa90Match-
Node
netappa700s_firmwareMatch-
AND
netappa700sMatch-
Node
netapp8300_firmwareMatch-
AND
netapp8300Match-
Node
netapp8700_firmwareMatch-
AND
netapp8700Match-
Node
netappa400_firmwareMatch-
AND
netappa400Match-
Node
netappc400_firmwareMatch-
AND
netappc400Match-
Node
netappa250_firmwareMatch-
AND
netappa250Match-
Node
netapp500f_firmwareMatch-
AND
netapp500fMatch-
Node
netappc250_firmwareMatch-
AND
netappc250Match-
Node
netappa800_firmwareMatch-
AND
netappa800Match-
Node
netappc800_firmwareMatch-
AND
netappc800Match-
Node
netappa900_firmwareMatch-
AND
netappa900Match-
Node
netappa9500_firmwareMatch-
AND
netappa9500Match-
Node
netappc190_firmwareMatch-
AND
netappc190Match-
Node
netappa150_firmwareMatch-
AND
netappa150Match-
Node
netappa220_firmwareMatch-
AND
netappa220Match-
Node
netappfas2720_firmwareMatch-
AND
netappfas2720Match-
Node
netappfas2750_firmwareMatch-
AND
netappfas2750Match-
Node
netappfas2820_firmwareMatch-
AND
netappfas2820Match-
Node
netappbootstrap_osMatch-
AND
netapphci_compute_nodeMatch-
Node
applemacosRange12.0–12.7.6
OR
applemacosRange13.0–13.6.8
OR
applemacosRange14.0–14.6
Node
openbsdopensshRange<4.4
OR
openbsdopensshRange8.6–9.8
OR
openbsdopensshMatch4.4-
OR
openbsdopensshMatch8.5p1
OR
openbsdopensshMatch8.6-
Node
redhatopenshift_container_platformMatch4.0
OR
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_eusMatch9.4
OR
redhatenterprise_linux_for_arm_64Match9.0_aarch64
OR
redhatenterprise_linux_for_arm_64_eusMatch9.4_aarch64
OR
redhatenterprise_linux_for_ibm_z_systemsMatch9.0_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch9.4_s390x
OR
redhatenterprise_linux_for_power_little_endianMatch9.0_ppc64le
OR
redhatenterprise_linux_for_power_little_endian_eusMatch9.4_ppc64le
OR
redhatenterprise_linux_server_ausMatch9.4
Node
suselinux_enterprise_microMatch6.0
Node
debiandebian_linuxMatch12.0
Node
canonicalubuntu_linuxMatch22.04lts
OR
canonicalubuntu_linuxMatch22.10-
OR
canonicalubuntu_linuxMatch23.04lts
Node
amazonamazon_linuxMatch2023.0
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
OR
netappe-series_santricity_os_controllerRange11.0.0–11.70.2
OR
netappontapMatch9
OR
netappontap_select_deploy_administration_utilityMatch-
OR
netappontap_toolsMatch9vmware_vsphere
OR
netappontap_toolsMatch10vmware_vsphere
Node
freebsdfreebsdMatch13.2-
OR
freebsdfreebsdMatch13.2p1
OR
freebsdfreebsdMatch13.2p10
OR
freebsdfreebsdMatch13.2p11
OR
freebsdfreebsdMatch13.2p2
OR
freebsdfreebsdMatch13.2p3
OR
freebsdfreebsdMatch13.2p4
OR
freebsdfreebsdMatch13.2p5
OR
freebsdfreebsdMatch13.2p6
OR
freebsdfreebsdMatch13.2p7
OR
freebsdfreebsdMatch13.2p8
OR
freebsdfreebsdMatch13.2p9
OR
freebsdfreebsdMatch13.3-
OR
freebsdfreebsdMatch13.3p1
OR
freebsdfreebsdMatch13.3p2
OR
freebsdfreebsdMatch13.3p3
OR
freebsdfreebsdMatch14.0-
OR
freebsdfreebsdMatch14.0beta5
OR
freebsdfreebsdMatch14.0p1
OR
freebsdfreebsdMatch14.0p2
OR
freebsdfreebsdMatch14.0p3
OR
freebsdfreebsdMatch14.0p4
OR
freebsdfreebsdMatch14.0p5
OR
freebsdfreebsdMatch14.0p6
OR
freebsdfreebsdMatch14.0p7
OR
freebsdfreebsdMatch14.0rc3
OR
freebsdfreebsdMatch14.0rc4-p1
OR
freebsdfreebsdMatch14.1-
OR
freebsdfreebsdMatch14.1p1
Node
netbsdnetbsdRange≤10.0.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 May 2026 12:17Current
CVSS 3.18.1
EPSS0.63835
CWE-362CWE-364
opensshsecurity regressionremote attackerrace conditionauthentication
176