Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-6387— Openssh: regresshion - race condition in ssh allows rce/dos

CVSS 8.1 · High EPSS 48.06% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-6387

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Openssh: regresshion - race condition in ssh allows rce/dos
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
信号处理例程中的竞争条件
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenSSH 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSSH(OpenBSD Secure Shell)是加拿大OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现,支持对所有的传输进行加密,可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 存在安全漏洞,该漏洞源于信号处理程序中存在竞争条件,攻击者利用该漏洞可以在无需认证的情况下远程执行任意代码并获得系统控制权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Affected Products

VendorProductAffected VersionsCPESubscribe
Red HatRed Hat Enterprise Linux 9 0:8.7p1-38.el9_4.1 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9 0:8.7p1-38.el9_4.1 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:8.7p1-12.el9_0.1 ~ * cpe:/a:redhat:rhel_e4s:9.0::appstream
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support 0:8.7p1-30.el9_2.4 ~ * cpe:/o:redhat:rhel_eus:9.2::baseos
Red HatRed Hat OpenShift Container Platform 4.13 413.92.202407091321-0 ~ * cpe:/a:redhat:openshift:4.13::el9
Red HatRed Hat OpenShift Container Platform 4.14 414.92.202407091253-0 ~ * cpe:/a:redhat:openshift:4.14::el8
Red HatRed Hat OpenShift Container Platform 4.15 415.92.202407091355-0 ~ * cpe:/a:redhat:openshift:4.15::el8
Red HatRed Hat OpenShift Container Platform 4.16 416.94.202407081958-0 ~ * cpe:/a:redhat:openshift:4.16::el9
Red HatRed Hat Ceph Storage 5-cpe:/a:redhat:ceph_storage:5
Red HatRed Hat Ceph Storage 6-cpe:/a:redhat:ceph_storage:6
Red HatRed Hat Ceph Storage 7-cpe:/a:redhat:ceph_storage:7
Red HatRed Hat Enterprise Linux 10-cpe:/o:redhat:enterprise_linux:10
Red HatRed Hat Enterprise Linux 6-cpe:/o:redhat:enterprise_linux:6
Red HatRed Hat Enterprise Linux 7-cpe:/o:redhat:enterprise_linux:7
Red HatRed Hat Enterprise Linux 8-cpe:/o:redhat:enterprise_linux:8

II. Public POCs for CVE-2024-6387

#POC DescriptionSource LinkShenlong Link
1a signal handler race condition in OpenSSH's server (sshd)https://github.com/zgzhang/cve-2024-6387-pocPOC Details
2Nonehttps://github.com/acrono/cve-2024-6387-pocPOC Details
3Nonehttps://github.com/lflare/cve-2024-6387-pocPOC Details
4Spirit - Network Pentest Tools CVE-2024-6387https://github.com/theaog/spiritPOC Details
5Nonehttps://github.com/shyrwall/cve-2024-6387-pocPOC Details
6Nonehttps://github.com/getdrive/CVE-2024-6387-PoCPOC Details
7SSHd cve-2024-6387-pochttps://github.com/FerasAlrimali/CVE-2024-6387-POCPOC Details
8Nonehttps://github.com/passwa11/cve-2024-6387-pocPOC Details
9Nonehttps://github.com/jack0we/CVE-2024-6387POC Details
10CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSHhttps://github.com/xaitax/CVE-2024-6387_CheckPOC Details
11Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.https://github.com/bigb0x/CVE-2024-6387POC Details
12CLI Tool to Check SSH Servers for Vulnerability to CVE-2024-6387https://github.com/wiggels/regresshion-checkPOC Details
13SSH RCE PoC CVE-2024-6387https://github.com/3yujw7njai/CVE-2024-6387POC Details
14OpenSSH CVE-2024-6387 Vulnerability Checkerhttps://github.com/betancour/OpenSSH-Vulnerability-testPOC Details
15Nonehttps://github.com/zgimszhd61/cve-2024-6387-pocPOC Details
16Nonehttps://github.com/yya1233/CVE-2024-6387-Updated-SSH-RCEPOC Details
17Nonehttps://github.com/muyuanlove/CVE-2024-6387fixshellPOC Details
18Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote code execution (RCE) with root privileges. This vulnerability, identified as CVE-2024-6387, resides in the OpenSSH server component (sshd), which is designed to listen for connections from client applications.https://github.com/TAM-K592/CVE-2024-6387POC Details
19This is a POC I wrote for CVE-2024-6387https://github.com/teamos-hub/regreSSHionPOC Details
20Nonehttps://github.com/Maikefee/CVE-2024-6387_Check.pyPOC Details
21Nonehttps://github.com/ahlfors/CVE-2024-6387POC Details
22Nonehttps://github.com/Mufti22/CVE-2024-6387-checkherPOC Details
23CVE-2024-6387 exploithttps://github.com/thegenetic/CVE-2024-6387-exploitPOC Details
24RCE OpenSSH CVE-2024-6387 Checkhttps://github.com/HadesNull123/CVE-2024-6387_CheckPOC Details
25This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH. The tool leverages multi-threading to optimize scanning performance and handle multiple IP addresses concurrently.https://github.com/R4Tw1z/CVE-2024-6387POC Details
26This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.https://github.com/d0rb/CVE-2024-6387POC Details
27Nonehttps://github.com/oliferFord/CVE-2024-6387-SSH-RCEPOC Details
28Used to detect ssh servers vulnerable to CVE-2024-6387. Shameless robbery from https://github.com/bigb0x/CVE-2024-6387 using ChatGPT to translate the code to PHP.https://github.com/CiderAndWhisky/regression-scannerPOC Details
29Script for checking CVE-2024-6387 (regreSSHion)https://github.com/shamo0/CVE-2024-6387_PoCPOC Details
30CVE-2024-6387-nmaphttps://github.com/paradessia/CVE-2024-6387-nmapPOC Details
31This Go program scans targets for CVE-2024-6387 in OpenSSH, categorizing servers by vulnerability status and port availability.https://github.com/SecWithMoh/CVE-2024-6387POC Details
32Private x64 RCE exploit for CVE-2024-6387 [02.07.2024] from exploit.inhttps://github.com/PrincipalAnthony/CVE-2024-6387-Updated-x64bitPOC Details
33Nonehttps://github.com/k4t3pr0/CVE-2024-6387-POCPOC Details
34An Ansible Playbook to mitigate the risk of RCE (CVE-2024-6387) until platforms update OpenSSH to a non-vulnerable version.https://github.com/DanWiseProgramming/CVE-2024-6387-Mitigation-Ansible-PlaybookPOC Details
35openssh-cve-2024-6387.shhttps://github.com/rumochnaya/openssh-cve-2024-6387.shPOC Details
36Mitigation Guide for CVE-2024-6387 in OpenSSHhttps://github.com/zenzue/CVE-2024-6387-MitigationPOC Details
37Nonehttps://github.com/devarshishimpi/CVE-2024-6387-CheckPOC Details
38cve-2024-6387_AImadehttps://github.com/hssmo/cve-2024-6387_AImadePOC Details
39Nonehttps://github.com/ACHUX21/checker-CVE-2024-6387POC Details
40CVE-2024-6387 with auto ip scanner and auto expliot https://github.com/AiGptCode/ssh_exploiter_CVE-2024-6387POC Details
41A bash script for nmap to scan for vulnerable machines in regards to the latest CVE-2024-6387https://github.com/xristos8574/regreSSHion-nmap-scannerPOC Details
42CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.https://github.com/xonoxitron/regreSSHionPOC Details
43开箱即用的AK47https://github.com/no-one-sec/CVE-2024-6387POC Details
44Nonehttps://github.com/dawnl3ss/CVE-2024-6387POC Details
45Nonehttps://github.com/MrR0b0t19/CVE-2024-6387-Exploit-POCPOC Details
46CVE-2024-6387 : Vulnerability Detection tool for regreSSHion Remote Unauthenticated Code Execution in OpenSSH Serverhttps://github.com/th3gokul/CVE-2024-6387POC Details
47Test_CVE-2024-6387 is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSHhttps://github.com/n1cks0n/Test_CVE-2024-6387POC Details
48PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) https://github.com/l0n3m4n/CVE-2024-6387POC Details
49CVE-2024-6387-Check is a streamlined and efficient tool created to detect servers operating on vulnerable versions of OpenSSH.https://github.com/RickGeex/CVE-2024-6387-CheckerPOC Details
50Quickly identifies servers vulnerable to OpenSSH 'regreSSHion' (CVE-2024-6387).https://github.com/xonoxitron/regreSSHion-checkerPOC Details
51Nonehttps://github.com/BrandonLynch2402/cve-2024-6387-nuclei-templatePOC Details
52Nonehttps://github.com/edsonjt81/CVE-2024-6387_CheckPOC Details
53Nonehttps://github.com/EkaterinaMarchetti/CVE-2024-6387-regreSSHion-CheckerPOC Details
54regreSSHion vulnerability in OpenSSH CVE-2024-6387 Testing Scripthttps://github.com/grupooruss/CVE-2024-6387-TesterPOC Details
55Nonehttps://github.com/CognisysGroup/CVE-2024-6387-CheckerPOC Details
56Targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems.https://github.com/sxlmnwb/CVE-2024-6387POC Details
57SSH Exploit for CVE-2024-6387 : RCE in OpenSSH's server, on glibc-based Linux systemshttps://github.com/Symbolexe/CVE-2024-6387POC Details
58SentinelSSH is an advanced, high-performance SSH vulnerability scanner written in Go. It's specifically designed to detect the CVE-2024-6387 vulnerability in OpenSSH servers across various network environments.https://github.com/harshinsecurity/sentinelsshPOC Details
59Nonehttps://github.com/t3rry327/cve-2024-6387-pocPOC Details
60Nonehttps://github.com/jocker2410/CVE-2024-6387_pocPOC Details
61CVE-2024-6387_Check 是一款轻量级、高效的工具,旨在识别运行易受攻击的 OpenSSH 版本的服务器,专门针对最近发现的regreSSHion漏洞 (CVE-2024-6387)。此脚本有助于快速扫描多个 IP 地址、域名和 CIDR 网络范围,以检测潜在漏洞并确保您的基础设施安全。https://github.com/JackSparrowhk/ssh-CVE-2024-6387-pocPOC Details
62Welcome to the CVE-2024-6387 OpenSSH Vulnerability Checker repository! This project offers multiple scripts to check the installed version of OpenSSH on your system and determine if it is vulnerable to CVE-2024-6387. It supports various environments, including Ubuntu, Mac, and Windows.https://github.com/turbobit/CVE-2024-6387-OpenSSH-Vulnerability-CheckerPOC Details
63Nonehttps://github.com/sms2056/CVE-2024-6387POC Details
64Provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387https://github.com/invaderslabs/regreSSHion-CVE-2024-6387-POC Details
65Nonehttps://github.com/lala-amber/CVE-2024-6387POC Details
66rewrited SSH Exploit for CVE-2024-6387 (regreSSHion)https://github.com/4lxprime/regreSSHivePOC Details
67A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.https://github.com/sardine-web/CVE-2024-6387_CheckPOC Details
68HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).https://github.com/0x4D31/cve-2024-6387_hasshPOC Details
69CVE-2024-6387-Check es una herramienta ligera y eficiente diseñada para identificar servidores que ejecutan versiones vulnerables de OpenSSH, específicamente el fallo de seguridad conocido como regreSSHion (CVE-2024-6387). Este script facilita el análisis rápido de múltiples direcciones IP, nombres de dominio y rangos de red CIDR.https://github.com/Segurmatica/CVE-2024-6387-CHECKPOC Details
70Quick regreSSHion checker (based on software version) for nuclei CVE-2024-6387https://github.com/sardine-web/CVE-2024-6387-templatePOC Details
71Nonehttps://github.com/imv7/CVE-2024-6387POC Details
72CVE-2024-6387 SSH finderhttps://github.com/SiberianHacker/CVE-2024-6387-FinderPOC Details
73Correção e Atualização do OpenSSH para CVE-2024-6387https://github.com/dgicloud/patch_regreSSHionPOC Details
74Vulnerability remediation and mitigationCVE-2024-6387https://github.com/azurejoga/CVE-2024-6387-how-to-fixPOC Details
75regreSSHion vulnerability in OpenSSH CVE-2024-6387 Testing Scripthttps://github.com/grupooruss/CVE-2024-6387POC Details
76Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)https://github.com/asterictnl-lvdw/CVE-2024-6387POC Details
77Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387https://github.com/vkaushik-chef/regreSSHionPOC Details
78Nonehttps://github.com/dgourillon/mitigate-CVE-2024-6387POC Details
79Nonehttps://github.com/mrmtwoj/CVE-2024-6387POC Details
80This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.https://github.com/filipi86/CVE-2024-6387-Vulnerability-CheckerPOC Details
81This Rust Code is designed to check SSH servers for the CVE-2024-6387 vulnerabilityhttps://github.com/kubota/CVE-2024-6387-Vulnerability-CheckerPOC Details
82Nonehttps://github.com/DimaMend/cve-2024-6387-pocPOC Details
83Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2024-6409, CVE-2006-5051, CVE-2008-4109, and 16 other CVEs.https://github.com/bigb0x/SSH-ScannerPOC Details
84CVE-2024-6387, also known as RegreSSHion, is a high-severity vulnerability found in OpenSSH servers (sshd) running on glibc-based Linux systems. It is a regression of a previously fixed vulnerability (CVE-2006-5051), which means the issue was reintroduced in newer versions of OpenSSH.https://github.com/ThemeHackers/CVE-2024-6387POC Details
85 OpenSSH vulnerability CVE-2024-6387https://github.com/Sibijo/mitigate_sshPOC Details
86Fix for regreSSHion CVE-2024-6387 for Ubuntu and Debianhttps://github.com/Passyed/regreSSHion-FixPOC Details
87Lỗ hổng thực thi mã không được xác thực từ xa trong máy chủ OpenSSHhttps://github.com/k4t3pr0/CVE-2024-6387-CheckPOC Details
88Script to address CVE-2024-6387 by changing the LoginGraceTime in sshd.https://github.com/liqhtnd/sshd-logingracetime0POC Details
89 OpenSSH a publié un avis de sécurité concernant la vulnérabilité critique CVE-2024-6387. Cette vulnérabilité permet à un attaquant non authentifié d'exécuter du code arbitrairehttps://github.com/Jhonsonwannaa/CVE-2024-6387POC Details
90OpenSSH RCE Massive Vulnerable Scannerhttps://github.com/ThatNotEasy/CVE-2024-6387POC Details
91Nonehttps://github.com/W1hithat/CVE-2024-6387POC Details
92Nonehttps://github.com/prelearn-code/CVE-2024-6387POC Details
93proof of concept python script for regreSSHion exploithttps://github.com/l-urk/CVE-2024-6387POC Details
94An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server https://github.com/alex14324/ssh_poc2024POC Details
95Proof of concept python script for regreSSHion exploit. Version 0.1.0.https://github.com/l-urk/CVE-2024-6387-LPOC Details
96CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH. https://github.com/niktoproject/CVE-202406387_Check.pyPOC Details
97Nonehttps://github.com/s1d6point7bugcrowd/CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSHPOC Details
98A Bash script to mitigate the CVE-2024-6387 vulnerability in OpenSSH by providing an option to upgrade to a secure version or apply a temporary workaround. This repository helps secure systems against potential remote code execution risks associated with affected OpenSSH versions.https://github.com/almogopp/OpenSSH-CVE-2024-6387-FixPOC Details
99This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.https://github.com/identity-threat-labs/CVE-2024-6387-Vulnerability-CheckerPOC Details
100In an era where digital security is crucial, a new vulnerability in OpenSSH, identified as CVE-2024-6387, has drawn the attention of system administrators and security professionals worldwide. Named "regreSSHion," this severe security flaw allows remote code execution (RCE) and could significant threat to the integrity of vulnerable systems.https://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387POC Details
101An Ansible Playbook to mitigate the risk of RCE (CVE-2024-6387) until platforms update OpenSSH to a non-vulnerable version.https://github.com/daniel-odrinski/CVE-2024-6387-Mitigation-Ansible-PlaybookPOC Details
102 OpenSSH a publié un avis de sécurité concernant la vulnérabilité critique CVE-2024-6387. Cette vulnérabilité permet à un attaquant non authentifié d'exécuter du code arbitrairehttps://github.com/dream434/CVE-2024-6387POC Details
103Nonehttps://github.com/skysaints/CVE-2024-6387-POCPOC Details
104Nonehttps://github.com/skyalliance/CVE-2024-6387-POCPOC Details
105Nonehttps://github.com/YassDEV221608/CVE-2024-6387POC Details
106Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)https://github.com/oxapavan/CVE-2024-6387POC Details
107Nonehttps://github.com/zql-gif/CVE-2024-6387POC Details
108test code for cve-2024-6387https://github.com/awusan125/test_for6387POC Details
109CVE-2024-6387, also known as RegreSSHion, is a high-severity vulnerability found in OpenSSH servers (sshd) running on glibc-based Linux systems. It is a regression of a previously fixed vulnerability (CVE-2006-5051), which means the issue was reintroduced in newer versions of OpenSSH.https://github.com/anhvutuan/CVE-2024-6387-poc-1POC Details
110Nonehttps://github.com/YassDEV221608/CVE-2024-6387_PoCPOC Details
111Script to address CVE-2024-6387 by changing the LoginGraceTime in sshd.https://github.com/liqhtnd/sshd-logingracetimePOC Details
112This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them.https://github.com/AzrDll/CVE-2024-6387POC Details
113Nonehttps://github.com/SkyGodling/CVE-2024-6387-POCPOC Details
114Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)https://github.com/Karmakstylez/CVE-2024-6387POC Details
115SSH RCE PoC CVE-2024-6387https://github.com/AiK1d/CVE-2024-6387POC Details
116 OpenSSH vulnerability CVE-2024-6387https://github.com/redux-sibi-jose/mitigate_sshPOC Details
117Nuclei template to detect CVE-2024-6387. All latest patched versions are excluded.https://github.com/xiw1ll/CVE-2024-6387_CheckerPOC Details
118CVE-2024-6387https://github.com/moften/regreSSHion-CVE-2024-6387POC Details
119SSH RCE PoC CVE-2024-6387https://github.com/P4x1s/CVE-2024-6387POC Details
120CVE-2024-6387 Exploit mit Reverse/Bind-Shell Support.https://github.com/OhDamnn/NoregresshPOC Details
121Relatório de Pentest Full-Scope (Black Box) focado em Red Team. Análise de segurança Web (SQL Injection, XSS), Wireless (WEP/WPA2), Evasão de Firewall (IP Fragmentation) e Exploração de RCE em OpenSSH (CVE-2024-6387).https://github.com/arielrbrdev/redteamlab1POC Details
122This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them.https://github.com/kinu404/CVE-2024-6387POC Details
123Nonehttps://github.com/Ngagne-Demba-Dia/CVE-2024-6387-corrigeePOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-6387

登录查看更多情报信息。

IV. Related Vulnerabilities

V. Comments for CVE-2024-6387

No comments yet


Leave a comment