Openssh: regresshion - race condition in ssh allows rce/dos
Priority HIGH 82CWE-364Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 10 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.99506 99th percentileScored 2026-11-07
Public exploit Yes 9 exploit referencesTagged by NVD
Fix Partial Red Hat: 7 advisoriesRed Hat: 10 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | OpenSSH | 8.5p1 – 9.7p1 | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 8.7p1-38.el9_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 8.7p1-38.el9_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | 8.7p1-12.el9_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 8.7p1-30.el9_2.4 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202407091321-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202407091253-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202407091355-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202407081958-0 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 5 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ceph Storage 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ceph Storage 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
- OpenSSH Vendor— Affected 8.5p1 – 9.7p1 Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 8.7p1-38.el9_4.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 8.7p1-38.el9_4.1 Patch available CNA
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8.7p1-12.el9_0.1 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 8.7p1-30.el9_2.4 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202407091321-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202407091253-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202407091355-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202407081958-0 Patch available CNA
- Red Hat Ceph Storage 5 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ceph Storage 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ceph Storage 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 117
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* | 4.32.0 – 4.32.1f | Vulnerable | Arista |
| cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:* | 23.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:* | 24.04 | Vulnerable | Canonical |
| cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:* | 9.0 | Vulnerable | Almalinux |
| cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
- cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:* Versions 4.32.0 – 4.32.1f Vulnerable ·Arista
- cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:* Versions 23.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:* Versions 24.04 Vulnerable ·Canonical
- cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Almalinux
- cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
Show 107 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:sonicwall:sma_7210_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:o:sonicwall:sma_8200v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma_8200v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:o:sonicwall:sra_ex_7000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sra_ex_7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:o:netapp:a1k_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a1k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a70_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a90_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a90:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:8300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:8700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:c400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:c250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:c800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:c800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a900_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a9500_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a9500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:c190:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a150_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:a220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:fas2720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:fas2750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:fas2820_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:fas2820:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 12.0 to before 12.7.6; 13.0 to before 13.6.8; 14.0 to before 14.6 | Vulnerable | Apple |
| cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* | before 4.4; 8.6 – 9.8 | Vulnerable | OpenBSD |
| cpe:2.3:a:openbsd:openssh:4.4:-:*:*:*:*:*:* | 4.4 | Vulnerable | OpenBSD |
| cpe:2.3:a:openbsd:openssh:8.5:p1:*:*:*:*:*:* | 8.5 p1 | Vulnerable | OpenBSD |
| cpe:2.3:a:openbsd:openssh:8.6:-:*:*:*:*:*:* | 8.6 | Vulnerable | OpenBSD |
| cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* | 9.0_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* | 9.4_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* | 9.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* | 9.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* | 9.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:suse:linux_enterprise_micro:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | SUSE |
| cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* | 12.0 | Vulnerable | Debian |
| cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* | 22.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:* | 22.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:lts:*:*:* | 23.04 | Vulnerable | Canonical |
| cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:* | 2023.0 | Vulnerable | AWS |
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* | 11.0.0 – 11.70.2 | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:* | 9 | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap_tools:9:*:*:*:*:vmware_vsphere:*:* | 9 | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:* | 10 | Vulnerable | NetApp |
| cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:* | 13.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:* | 13.2 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p10:*:*:*:*:*:* | 13.2 p10 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p11:*:*:*:*:*:* | 13.2 p11 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:* | 13.2 p2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:* | 13.2 p3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:* | 13.2 p4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:* | 13.2 p5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:* | 13.2 p6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p7:*:*:*:*:*:* | 13.2 p7 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p8:*:*:*:*:*:* | 13.2 p8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.2:p9:*:*:*:*:*:* | 13.2 p9 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.3:-:*:*:*:*:*:* | 13.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.3:p1:*:*:*:*:*:* | 13.3 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.3:p2:*:*:*:*:*:* | 13.3 p2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:13.3:p3:*:*:*:*:*:* | 13.3 p3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:* | 14.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:* | 14.0 beta5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:* | 14.0 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p2:*:*:*:*:*:* | 14.0 p2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p3:*:*:*:*:*:* | 14.0 p3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p4:*:*:*:*:*:* | 14.0 p4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p5:*:*:*:*:*:* | 14.0 p5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p6:*:*:*:*:*:* | 14.0 p6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:p7:*:*:*:*:*:* | 14.0 p7 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:* | 14.0 rc3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:* | 14.0 rc4-p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.1:-:*:*:*:*:*:* | 14.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:14.1:p1:*:*:*:*:*:* | 14.1 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:* | up to 10.0.0 | Vulnerable | NetBSD |
- cpe:2.3:o:sonicwall:sma_7210_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:o:sonicwall:sma_8200v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma_8200v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:o:sonicwall:sra_ex_7000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sra_ex_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:o:netapp:a1k_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a1k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a70_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a90_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:8300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:8700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:c400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:c250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:c800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:c800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a900_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a9500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a9500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:c190:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a150_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:a220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:fas2720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:fas2750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:fas2820_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:fas2820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions 12.0 to before 12.7.6; 13.0 to before 13.6.8; 14.0 to before 14.6 Vulnerable ·Apple
- cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* Versions before 4.4; 8.6 – 9.8 Vulnerable ·OpenBSD
- cpe:2.3:a:openbsd:openssh:4.4:-:*:*:*:*:*:* Versions 4.4 Vulnerable ·OpenBSD
- cpe:2.3:a:openbsd:openssh:8.5:p1:*:*:*:*:*:* Versions 8.5 p1 Vulnerable ·OpenBSD
- cpe:2.3:a:openbsd:openssh:8.6:-:*:*:*:*:*:* Versions 8.6 Vulnerable ·OpenBSD
- cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:suse:linux_enterprise_micro:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·SUSE
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Debian
- cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* Versions 22.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:* Versions 22.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:lts:*:*:* Versions 23.04 Vulnerable ·Canonical
- cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:* Versions 2023.0 Vulnerable ·AWS
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* Versions 11.0.0 – 11.70.2 Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap_tools:9:*:*:*:*:vmware_vsphere:*:* Versions 9 Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:* Versions 10 Vulnerable ·NetApp
- cpe:2.3:o:freebsd:freebsd:13.2:-:*:*:*:*:*:* Versions 13.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p1:*:*:*:*:*:* Versions 13.2 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p10:*:*:*:*:*:* Versions 13.2 p10 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p11:*:*:*:*:*:* Versions 13.2 p11 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p2:*:*:*:*:*:* Versions 13.2 p2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p3:*:*:*:*:*:* Versions 13.2 p3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p4:*:*:*:*:*:* Versions 13.2 p4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p5:*:*:*:*:*:* Versions 13.2 p5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p6:*:*:*:*:*:* Versions 13.2 p6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p7:*:*:*:*:*:* Versions 13.2 p7 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p8:*:*:*:*:*:* Versions 13.2 p8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.2:p9:*:*:*:*:*:* Versions 13.2 p9 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.3:-:*:*:*:*:*:* Versions 13.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.3:p1:*:*:*:*:*:* Versions 13.3 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.3:p2:*:*:*:*:*:* Versions 13.3 p2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:13.3:p3:*:*:*:*:*:* Versions 13.3 p3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:-:*:*:*:*:*:* Versions 14.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:beta5:*:*:*:*:*:* Versions 14.0 beta5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p1:*:*:*:*:*:* Versions 14.0 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p2:*:*:*:*:*:* Versions 14.0 p2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p3:*:*:*:*:*:* Versions 14.0 p3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p4:*:*:*:*:*:* Versions 14.0 p4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p5:*:*:*:*:*:* Versions 14.0 p5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p6:*:*:*:*:*:* Versions 14.0 p6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:p7:*:*:*:*:*:* Versions 14.0 p7 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:rc3:*:*:*:*:*:* Versions 14.0 rc3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.0:rc4-p1:*:*:*:*:*:* Versions 14.0 rc4-p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.1:-:*:*:*:*:*:* Versions 14.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:14.1:p1:*:*:*:*:*:* Versions 14.1 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:* Versions up to 10.0.0 Vulnerable ·NetBSD
Remediation
Red Hat 7 advisories
- RHSA-2024:4474 Released 2024-07-18 · Red Hat rating ImportantOpenShift Container Platform 4.15.22 security update
- Red Hat OpenShift Container Platform 4.15 rhcos
- RHSA-2024:4484 Released 2024-07-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.45 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
- RHSA-2024:4479 Released 2024-07-17 · Red Hat rating ImportantOpenShift Container Platform 4.14.33 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-disk-csi-driver-rhel8, openshift4/ose-cluster-image-registry-operator, rhcos
Show 4 more Red Hat advisories
- RHSA-2024:4469 Released 2024-07-16 · Red Hat rating ImportantOpenShift Container Platform 4.16.3 security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-ibm-vpc-block-csi-driver-rhel9, openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator, rhcos
- RHSA-2024:4389 Released 2024-07-08 · Red Hat rating Importantopenssh security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) openssh-askpass-8.7p1-12.el9_0.1, pam_ssh_agent_auth-0.10.4-4.12.el9_0.1
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) openssh-8.7p1-12.el9_0.1, openssh-clients-8.7p1-12.el9_0.1, openssh-keycat-8.7p1-12.el9_0.1 +1
- RHSA-2024:4340 Released 2024-07-05 · Red Hat rating Importantopenssh security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) openssh-askpass-8.7p1-30.el9_2.4, pam_ssh_agent_auth-0.10.4-5.30.el9_2.4
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) openssh-8.7p1-30.el9_2.4, openssh-clients-8.7p1-30.el9_2.4, openssh-keycat-8.7p1-30.el9_2.4 +1
- RHSA-2024:4312 Released 2024-07-03 · Red Hat rating Importantopenssh security update
- Red Hat Enterprise Linux AppStream (v. 9) openssh-askpass-8.7p1-38.el9_4.1, pam_ssh_agent_auth-0.10.4-5.38.el9_4.1
- Red Hat Enterprise Linux BaseOS (v. 9) openssh-8.7p1-38.el9_4.1, openssh-clients-8.7p1-38.el9_4.1, openssh-keycat-8.7p1-38.el9_4.1 +1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 4 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:4312 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2024:4389 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:4340 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2024:4312 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2024:4389 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2024:4340 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2024:4484 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2024:4479 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2024:4474 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2024:4469 |
Not affected: 11 products
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 6
- Red Hat Ceph Storage 7
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
Timeline
- 2026-10-02 Threatist record created from CVE-2024-6387
- 2026-10-03 Alias added: GHSA-2x8c-95vh-gfv4
- 2026-10-15 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +1 · CNA
References
Exploit 9
- https://santandersecurityresearch.github.io/blog/sshing_the_masses.html
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
- http://www.openwall.com/lists/oss-security/2024/07/03/11
- http://www.openwall.com/lists/oss-security/2024/07/04/2
- http://www.openwall.com/lists/oss-security/2024/07/08/2
- http://www.openwall.com/lists/oss-security/2024/07/09/5
- http://www.openwall.com/lists/oss-security/2024/07/10/1
- https://www.exploit-db.com/exploits/52269
- https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387
Patch 4
Advisory 32
- RHSA-2024:4312
- RHSA-2024:4340
- RHSA-2024:4389
- RHSA-2024:4469
- RHSA-2024:4474
- RHSA-2024:4479
- RHSA-2024:4484
- https://access.redhat.com/security/cve/CVE-2024-6387
- RHBZ#2294604
- https://www.openssh.com/txt/release-9.8
- https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/
- https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/
- https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server
- https://explore.alas.aws.amazon.com/CVE-2024-6387.html
- https://github.com/zgzhang/cve-2024-6387-poc
- https://lists.almalinux.org/archives/list/[email protected]/thread/23BF5BMGFVEVUI2WNVAGMLKT557EU7VY/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010
- https://security-tracker.debian.org/tracker/CVE-2024-6387
- https://security.netapp.com/advisory/ntap-20240701-0001/
- https://sig-security.rocky.page/issues/CVE-2024-6387/
- https://stackdiary.com/openssh-race-condition-in-sshd-allows-remote-code-execution/
- https://support.apple.com/kb/HT214118
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214120
- https://ubuntu.com/security/CVE-2024-6387
- https://ubuntu.com/security/notices/USN-6859-1
- https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do
- https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100
- https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc
- https://www.splunk.com/en_us/blog/security/cve-2024-6387-regresshion-vulnerability.html
- https://www.suse.com/security/cve/CVE-2024-6387.html
- https://www.theregister.com/2024/07/01/regresshion_openssh/
More Red Hat Enterprise Linux vulnerabilities
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
- TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
Sources
- CVE-2024-6387 · CVE Program
- CVE-2024-6387 · NVD
- FIRST EPSS
- GHSA-2x8c-95vh-gfv4 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-6387 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences