Unit 42 Palo Alto Networks
On July 1, 2024, a signal handler race condition in OpenSSH servers (sshd) on glibc-based Linux systems was disclosed as CVE-2024-6387, called RegreSSHion, rated High severity (CVSS 8.1) and capable of unauthenticated remote code execution with root...
Zero-Days & Exploits
Qualys Blog
Qualys' Threat Research Unit found CVE-2024-6387, a signal handler race condition in OpenSSH's sshd that allows unauthenticated remote code execution as root on glibc-based Linux systems in the default configuration. Qualys identified over 14 million...
Vulnerabilities & Patching
GreyNoise Blog
On July 1, 2024, Qualys disclosed CVE-2024-6387, a high-severity OpenSSH server flaw (CVSS 8.1) affecting versions 8.5p1 through 9.7p1 that could let unauthenticated remote attackers execute code with root privileges, with Palo Alto Networks' Xpanse...
Threat Actors & Nation-State