Cisco DNA Spaces Connector Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco DNA Spaces Connector is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco DNA Spaces Connector due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

EUVD-2021-2863

Malicious code in bioql PyPI...

TencentOS Server 4: openssh (TSSA-2024:0249)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0249 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Signal Handler Race Condition

Overview Affected versions of this package are vulnerable to Signal Handler Race Condition due to a lack of protection in the grantuseraccess function, which decides whether a user should be allowed to read a core file or not. An attacker can crash a SUID program and gain read access to the...

Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities

Summary QRadar Suite Software includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version. Vulnerability Details...

Security update for openssh

This update for openssh fixes the following issues: CVE-2024-39894: Fixed timing attacks against echo-off password entry bsc1227318 CVE-2024-6387: Fixed race condition in a signal handler bsc1226642. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

SUSE-SU-2025:20009-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2024-39894: Fixed timing attacks against echo-off password entry bsc1227318 - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-2604)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-2454)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-2455)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : openssh (EulerOS-SA-2024-2455)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signal handler race condition was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime seconds 120 by...

Siemens Industrial Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Rocky Linux 9 : OpenSSH regreSSHion (CVE-2024-6387)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the 'Rocky Linux 9 - CVE-2024-6387: regreSSHion' news article. sshd: Signal handler race condition that can lead to a potential remote code execution. CVE-2024-6387 Note this plugin only...

EulerOS Virtualization 2.11.1 : openssh (EulerOS-SA-2024-2159)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A signal handler race condition was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-2089)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : openssh (EulerOS-SA-2024-2089)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signal handler race condition was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime seconds 120 by...

EulerOS 2.0 SP11 : openssh (EulerOS-SA-2024-2106)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signal handler race condition was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime seconds 120 by...

CLSA-2024-1721929402 openssh: Fix of CVE-2024-6409

CVE-2024-6409: fix signal handler race condition vulnerability in sshd server...

Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2024-651)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-651 advisory. A signal handler race condition vulnerability was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime seconds 120 by default, 600 in old OpenSSH versions, then...

AIX is vulnerable to arbitrary code execution (CVE-2024-6387) due to OpenSSH

IBM SECURITY ADVISORY First Issued: Tue Jul 9 15:29:43 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/opensshadvisory17.asc Security Bulletin: AIX is vulnerable to arbitrary code execution CVE-2024-6387 due to OpenSSH...