-
Update openssh to version 9.8p1 to mitigate CVE-2024-6387 (https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh…
-
The OpenSSH version in the latest 5.2 release from July 3rd is vulnerable to CVE-2024-6387. It needs to be upgraded to higher than 9.8p1 to fix this vulnerability.
-
Description from RH:
A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versi…
-
### Describe your issue as much as you can
I'm assuming that the OpenSSH server vulnerability (CVE-2024-6387) is present in Debian GNU/Linux 10 (buster)?
How can I get fixes for this version? Will t…
-
Thanks for the job.
Seems to have a problem with specified ports :
python CVE-2024-6387_Check.py -ports 22,22222 -l linux.txt
_________ _________ ___ __…
-
We use `ssh2-sftp-client`, a JavaScript implementation of SSH2 in Node.js, and we've read about the vulnerability with OpenSSH.
In our research, we found a breach in the `ssh2` library because it u…
-
It was discovered that OpenSSH incorrectly handled signal management. A remote attacker could use this issue to bypass authentication and remotely access systems without proper credentials.
https:/…
-
Can we please have a new version of the openssh in the addon?.. [Context](https://www.ox.security/cve-2024-6387-regresshion/#:~:text=8.5p1%20to%209.7p1).
-
### Environment:
- Fail2Ban version v0.11.2
- OS, including release name/version : Ubuntu 22.04..4
#### Service, project or product which log or journal should be monitored
- Name of fi…
-
Description: On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tr…