Lucene search
Jagir ShastriTRENDMICROBLOG:9D185C6C1832ACA84411E495CCC71A75HistoryJul 17, 2024 - 12:00 a.m.
The Potential Impact of the OpenSSH Vulnerabilities CVE-2024–6387 and CVE-2024-6409
2024-07-1700:00:00
Jagir Shastri
www.trendmicro.com
9
openssh
vulnerabilities
cve-2024
impact
exploitation
x64
systems
blog
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.004
Percentile
73.8%
We check the OpenSSH vulnerabilities CVE-2024–6387 and CVE-2024-6409, examining their potential real-world impact and the possibility of exploitation for CVE-2024–6387 in x64 systems.
Related
redhatcve
redhatcve
CVE-2024-6409
2024-07-08 17:56:18
thn
thn
New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk
2024-07-10 03:26:00
FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability
2024-08-12 10:15:00
nessus
nessus
Oracle Linux 9 : openssh (ELSA-2024-4457)
2024-07-10 00:00:00
Rocky Linux 9 : openssh (RLSA-2024:4457)
2024-07-15 00:00:00
cvelist
cvelist
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
2024-07-08 17:57:10
CVE-2024-7589 OpenSSH pre-authentication async signal safety issue
2024-08-11 03:15:52
CVE-2024-6387 Openssh: regresshion - race condition in ssh allows rce/dos
2024-07-01 12:37:25
debiancve
debiancve
almalinux
almalinux
Moderate: openssh security update
2024-07-10 00:00:00
Important: openssh security update
2024-07-03 00:00:00
f5
f5
K000140975: OpenSSH vulnerability CVE-2024-6409
2024-09-06 00:00:00
K000140222: OpenSSH server vulnerability CVE-2024-6387
2024-07-01 00:00:00
redhat
redhat
(RHSA-2024:4910) Moderate: openssh security update
2024-07-30 08:39:38
(RHSA-2024:4457) Moderate: openssh security update
2024-07-10 13:14:35
(RHSA-2024:4716) Moderate: openssh security update
2024-07-23 08:05:33
openvas
openvas
OpenBSD OpenSSH 8.7p1 - 8.8p1 RCE Vulnerability
2024-07-09 00:00:00
QNAP QuTS hero OpenSSH RCE Vulnerability (QSA-24-31, regreSSHion)
2024-07-03 00:00:00
openSUSE: Security Advisory for openssh (SUSE-SU-2024:2275-1)
2024-07-10 00:00:00
vulnrichment
vulnrichment
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
2024-07-08 17:57:10
CVE-2024-7589 OpenSSH pre-authentication async signal safety issue
2024-08-11 03:15:52
CVE-2024-6387 Openssh: regresshion - race condition in ssh allows rce/dos
2024-07-01 12:37:25
osv
osv
Moderate: openssh security update
2024-07-15 12:18:40
Moderate: openssh security update
2024-07-10 00:00:00
CVE-2024-6409
2024-07-08 18:15:09
ubuntucve
ubuntucve
CVE-2024-6409
2024-07-08 00:00:00
CVE-2024-6387
2024-07-01 00:00:00
rocky
rocky
openssh security update
2024-07-15 12:18:40
oraclelinux
oraclelinux
openssh security update
2024-07-10 00:00:00
openssh security update
2024-07-04 00:00:00
openssh security update
2024-07-01 00:00:00
cve
cve
CVE-2024-6409
2024-07-08 18:15:09
CVE-2024-7589
2024-08-12 13:38:44
nvd
nvd
gentoo
gentoo
OpenSSH: Remote Code Execution
2024-07-01 00:00:00
mageia
mageia
Updated openssh packages fix security vulnerability
2024-07-03 19:36:28
kaspersky
kaspersky
KLA70445 ACE vulnerability in Microsoft Mariner
2024-07-11 00:00:00
KLA71456 RCE vulnerability in Microsoft Azure
2024-07-11 00:00:00
ibm
ibm
githubexploit
githubexploit
Exploit for Race Condition in Openbsd Openssh
2024-07-02 17:04:52
Exploit for Race Condition in Openbsd Openssh
2024-07-02 09:41:40
Exploit for Race Condition in Openbsd Openssh
2024-07-01 12:26:40
freebsd
freebsd
OpenSSH -- Race condition resulting in potential remote code execution
2024-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: openssh-9.6p1-1.fc40.4
2024-07-02 20:16:57
[SECURITY] Fedora 39 Update: openssh-9.3p1-11.fc39
2024-07-02 18:08:34
archlinux
archlinux
[ASA-202407-1] openssh: authentication bypass
2024-07-01 00:00:00
slackware
slackware
[slackware-security] openssh
2024-07-01 20:31:12
cbl_mariner
cbl_mariner
CVE-2024-6387 affecting package openssh for versions less than 8.9p1-6
2024-07-04 13:46:57
CVE-2024-6387 affecting package openssh for versions less than 9.8p1-1
2024-08-25 15:13:42
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-138)
2024-07-01 00:00:00
Virtuozzo Hybrid Infrastructure 6.1 Update 1.3 (6.1.1-44)
2024-07-01 00:00:00
Virtuozzo Hybrid Infrastructure 6.0 Update 1.8 (6.0.1-98)
2024-07-01 00:00:00
aix
aix
AIX is vulnerable to arbitrary code execution (CVE-2024-6387) due to OpenSSH
2024-07-09 15:29:43
ubuntu
ubuntu
OpenSSH vulnerability
2024-07-01 00:00:00
mscve
mscve
schneier
schneier
New Open SSH Vulnerability
2024-07-03 15:27:11
cloudfoundry
cloudfoundry
USN-6859-1: OpenSSH vulnerability | Cloud Foundry
2024-07-25 00:00:00
paloalto
paloalto
Informational Bulletin: Impact of OpenSSH regreSSHion Vulnerability
2024-07-01 19:30:00
broadcom
broadcom
wizblog
wizblog
RCE vulnerability in OpenSSH: everything you need to know
2024-07-01 13:49:17
redos
redos
ROS-20240704-01
2024-07-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0307
2024-07-01 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0642
2024-07-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-24:04.openssh
2024-07-01 00:00:00
FreeBSD-SA-24:08.openssh
2024-08-07 00:00:00
alpinelinux
alpinelinux
CVE-2024-6387
2024-07-01 13:15:06
citrix
citrix
Cloud Software Group Security Advisory for CVE-2024-6387
2024-07-04 15:15:05
attackerkb
attackerkb
CVE-2020-14871
2020-10-21 00:00:00
ics
ics
Siemens Industrial Products
2024-09-12 12:00:00
cisco
cisco
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.004
Percentile
73.8%
Related for TRENDMICROBLOG:9D185C6C1832ACA84411E495CCC71A75