PT-2017-1237

🗓️ 04 Jan 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

Buffer overflow in OpenSSH sshd daemon shared memory manager leads to privilege escalation.

Reporter	Title	Published	Views	Family All 976
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.5 is affected by a arbitrary code execution in OpenSSH server [CVE-2024-6387]	23 Jul 202421:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary command execution in OpenSSH [CVE-2023-51385]	3 Oct 202417:47	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH for IBM i is vulnerable to an attacker executing arbitrary code due to a signal handler race condition. [CVE-2024-6387]	28 Aug 202422:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in OpenSSH	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Virtualization on Cloud Pak for Data is vulnerable to OpenSSH vulnerability CVE-2024-6387	10 Aug 202403:11	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH vulnerability affects IBM Spectrum Protect Plus (CVE-2020-15778)	3 Aug 202022:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affects Power Hardware Management Console	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in OpenSSH	7 Dec 202322:45	–	ibm

Source	Link
github	www.github.com/zgzhang/cve-2024-6387-poc
bugzilla	www.bugzilla.suse.com/1023275
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb
github	www.github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210
security	www.security.alpinelinux.org/vuln/CVE-2016-10012
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:11124-1
suse	www.suse.com/support/update/announcement/2018/suse-su-20182685-1
suse	www.suse.com/security/cve/CVE-2019-6111
github	www.github.com/th3gokul/CVE-2024-6387
suse	www.suse.com/security/cve/CVE-2019-6110

08 Jul 2024 00:00Current

CVSS 3.17.8 - 8.1

CVSS 27.2

CVSS 37.8

EPSS0.99506

SSVC

OpenSSH sshd buffer overflow privilege escalation shared memory manager m zback m zlib