Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-6387] RCE vulnerability in OpenSSH: everything you need to know

wiz.io | vulnerability | CVE-2024-6387 | #rce | #linux | #vulnerability | #patching | #openssh | #cve-2024-6387

Summary

CVE-2024-6387 (regreSSHion) is an unauthenticated root RCE in OpenSSH's server—a signal handler race on glibc-based Linux; mass exploitation is deemed unlikely, but prompt patching is advised.
Published
Collected

original ↗

Related coverage

  1. CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know (wiz.io)
  2. Critical RCE vulnerability in PHP CGI: everything you need to know (wiz.io)
  3. CVE-2024-4040 exploited in the wild: everything you need to know (wiz.io)
  4. Backdoor in XZ Utils allows RCE: everything you need to know (wiz.io)
  5. CVE-2023-38545 high severity vulnerability in cURL: everything you need to know (wiz.io)
  6. Critical and high severity Exim vulnerabilities: everything you need to know (wiz.io)

back