CVE-2024-6387 PoC — Openssh: regresshion - race condition in ssh allows rce/dos

Source

https://github.com/liqhtnd/sshd-logingracetime

Associated Vulnerability

Title:Openssh: regresshion - race condition in ssh allows rce/dos (CVE-2024-6387)
Description:A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Description

Script to address CVE-2024-6387 by changing the LoginGraceTime in sshd.

Readme

## Script for CVE-2024-6387

```bash
wget -qO- https://raw.githubusercontent.com/liqhtnd/sshd-logingracetime0/main/update_sshd_config.sh | bash
```
```bash
curl -sL https://raw.githubusercontent.com/liqhtnd/sshd-logingracetime0/main/update_sshd_config.sh | bash
```

File Snapshot


 [4.0K]  /data/pocs/82cee797b354939b7c25fac6c534adeca7b1ff3c
├── [1.0K]  LICENSE
├── [ 266]  README.md
└── [ 573]  update_sshd_config.sh

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!