OpenSSH CVE-2024-6387 RCE Vulnerability: Risk & Mitigation | Qualys
Summary: Qualys' Threat Research Unit found CVE-2024-6387, a signal handler race condition in OpenSSH's sshd that allows unauthenticated remote code execution as root on glibc-based Linux systems in the default configuration. Qualys identified over 14 million potentially vulnerable OpenSSH instances exposed to the internet via Censys and Shodan, with roughly 700,000 internet-facing instances in its customer base confirmed vulnerable, and traced the flaw to a regression introduced in October 2020 (OpenSSH 8.5p1) of a bug patched in 2006 as CVE-2006-5051.
Why it matters: Root-level RCE on sshd bypasses firewalls, intrusion detection, and logging, and a compromised host becomes a foothold for lateral movement across the network. Qualys built a working exploit but is withholding it; the company expects independent researchers to replicate it, so the window between disclosure and public exploit code is the time you have to patch or set LoginGraceTime to 0.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2006-5051CVE-2024-6387
- Related
- Storm⚡Watch: Unplugged - July 9th, 2024 Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026