CVE-2024-6387-OpenSSH-Analysis

CVE-2024-6387 OpenSSH Analysis Overview Security analysis of CVE-2024-6387 vulnerability affecting OpenSSH server. Tools Used Kali Linux Nmap Metasploitable 2 Vulnerability Details CVE-2024-6387 is a vulnerability in OpenSSH caused by a race condition in sshd, which may allow an unauthorised remo...

CVE-2024-6387

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2023-25136

CVE-2023-25136 Looking into the memory when sshd 9.1p1 aborts due to a double free bug. The pdf has some images that are rather blurry. I will update it soon for better legibility...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils Backdoor 🧠 Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. ⚠️ This...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2024-3094-backdoor-env-container

CVE-2024-3094 SSH Backdoor Container Env This is an environment running CVE-2024-3094 sshd backdoor instance, working with this exploit: https://github.com/amlweems/xzbot. Experiments Test in Docker IT IS NOT a Docker container. I had tried making this vulnerability env with docker but failed: 1...

CVE-2024-6387-POC

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

regreSSHion-CVE-2024-6387-

CVE-2024-6387 Checker This README provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387. The script inspects the installed sshd binaries on your system, determines their versions, and checks for vulnerability status based on the detected...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

freebsd-CVE-2026-7270

Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 Escalada de privilegios local en FreeBSD medianteexecargsadjustargs con memmove fuera de límites Un error de precedencia de operadores en execargsadjustargs sys/kern/kernexec.c, presente desde 2013...

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentation

A flaw was found in Apache MINA SSHD. When the server is configured to require multiple Secure Shell SSH public keys for authentication, it fails to verify that the submitted keys are distinct. A remote user can exploit this flaw by presenting the same public key twice to satisfy multi-key...

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

openssh security update

An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

RLSA-2026:69130 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...

RLSA-2026:69129 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...

openssh security, bug fix, and enhancement update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

RLSA-2026:69266 Important: openssh security, bug fix, and enhancement update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...

RockyLinux 9 : openssh (RLSA-2026:69130)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

AlmaLinux 10 : openssh (ALSA-2026:69129)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...