---
id: 7148
title: "[CVE-2024-6387] RCE vulnerability in OpenSSH: everything you need to know"
cve: CVE-2024-6387
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/cve-2024-6387-critical-rce-openssh"
published_at: "2024-07-01T13:49:17Z"
tags: ["rce", "linux", "vulnerability", "patching", "openssh", "cve-2024-6387"]
phying_url: "https://phying.com/item/7148"
lang: en
---

# [CVE-2024-6387] RCE vulnerability in OpenSSH: everything you need to know

## Summary

CVE-2024-6387 (regreSSHion) is an unauthenticated root RCE in OpenSSH's server—a signal handler race on glibc-based Linux; mass exploitation is deemed unlikely, but prompt patching is advised.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-6387
- **Published:** 2024-07-01T13:49:17Z
- **Original:** https://www.wiz.io/blog/cve-2024-6387-critical-rce-openssh
- **Phying News:** https://phying.com/item/7148