Skip to content

News

2024-066: Critical Vulnerability in OpenSSH

2024-066: Critical Vulnerability in OpenSSH

On July 1, 2024, a new OpenSSH unauthenticated remote code execution (RCE) vulnerability dubbed regreSSHion was reported, affecting glibc-based Linux systems. This vulnerability, identified as CVE-2024-6387, allows remote attackers to execute arbitrary code as root due to a signal handler race condition in sshd. OpenSSH regreSSHion Vulnerability OpenSSH regreSSHion Vulnerability

Members Public