Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-6387

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 8.1, indicating it can be exploited remotely over the network but requires specific conditions to be met without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 81 products from sonicwall, from sonicwall, from sonicwall and 78 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2024, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2024-07-01T13:15:06.467

Last Modified

2025-09-30T13:52:23.540

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses

Type: Secondary
CWE-364
Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	sonicwall	sma_6200_firmware	-	Yes
Hardware	sonicwall	sma_6200	-	No
Operating System	sonicwall	sma_7200_firmware	-	Yes
Hardware	sonicwall	sma_7200	-	No
Operating System	arista	eos	≤ 4.32.1f	Yes
Operating System	canonical	ubuntu_linux	23.10	Yes
Operating System	canonical	ubuntu_linux	24.04	Yes
Operating System	almalinux	almalinux	9.0	Yes
Operating System	sonicwall	sma_6210_firmware	-	Yes
Hardware	sonicwall	sma_6210	-	No
Operating System	sonicwall	sma_7210_firmware	-	Yes
Hardware	sonicwall	sma_7210	-	No
Operating System	sonicwall	sma_8200v_firmware	-	Yes
Hardware	sonicwall	sma_8200v	-	No
Operating System	sonicwall	sra_ex_7000_firmware	-	Yes
Hardware	sonicwall	sra_ex_7000	-	No
Operating System	netapp	a1k_firmware	-	Yes
Hardware	netapp	a1k	-	No
Operating System	netapp	a70_firmware	-	Yes
Hardware	netapp	a70	-	No
Operating System	netapp	a90_firmware	-	Yes
Hardware	netapp	a90	-	No
Operating System	netapp	a700s_firmware	-	Yes
Hardware	netapp	a700s	-	No
Operating System	netapp	8300_firmware	-	Yes
Hardware	netapp	8300	-	No
Operating System	netapp	8700_firmware	-	Yes
Hardware	netapp	8700	-	No
Operating System	netapp	a400_firmware	-	Yes
Hardware	netapp	a400	-	No
Operating System	netapp	c400_firmware	-	Yes
Hardware	netapp	c400	-	No
Operating System	netapp	a250_firmware	-	Yes
Hardware	netapp	a250	-	No
Operating System	netapp	500f_firmware	-	Yes
Hardware	netapp	500f	-	No
Operating System	netapp	c250_firmware	-	Yes
Hardware	netapp	c250	-	No
Operating System	netapp	a800_firmware	-	Yes
Hardware	netapp	a800	-	No
Operating System	netapp	c800_firmware	-	Yes
Hardware	netapp	c800	-	No
Operating System	netapp	a900_firmware	-	Yes
Hardware	netapp	a900	-	No
Operating System	netapp	a9500_firmware	-	Yes
Hardware	netapp	a9500	-	No
Operating System	netapp	c190_firmware	-	Yes
Hardware	netapp	c190	-	No
Operating System	netapp	a150_firmware	-	Yes
Hardware	netapp	a150	-	No
Operating System	netapp	a220_firmware	-	Yes
Hardware	netapp	a220	-	No
Operating System	netapp	fas2720_firmware	-	Yes
Hardware	netapp	fas2720	-	No
Operating System	netapp	fas2750_firmware	-	Yes
Hardware	netapp	fas2750	-	No
Operating System	netapp	fas2820_firmware	-	Yes
Hardware	netapp	fas2820	-	No
Operating System	netapp	bootstrap_os	-	Yes
Hardware	netapp	hci_compute_node	-	No
Operating System	apple	macos	< 12.7.6	Yes
Operating System	apple	macos	< 13.6.8	Yes
Operating System	apple	macos	< 14.6	Yes
Application	openbsd	openssh	< 4.4	Yes
Application	openbsd	openssh	≤ 9.8	Yes
Application	openbsd	openssh	4.4	Yes
Application	openbsd	openssh	8.5	Yes
Application	openbsd	openssh	8.6	Yes
Application	redhat	openshift_container_platform	4.0	Yes
Operating System	redhat	enterprise_linux	9.0	Yes
Operating System	redhat	enterprise_linux_eus	9.4	Yes
Operating System	redhat	enterprise_linux_for_arm_64	9.0_aarch64	Yes
Operating System	redhat	enterprise_linux_for_arm_64_eus	9.4_aarch64	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems	9.0_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.4_s390x	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian	9.0_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.4_ppc64le	Yes
Operating System	redhat	enterprise_linux_server_aus	9.4	Yes
Operating System	suse	linux_enterprise_micro	6.0	Yes
Operating System	debian	debian_linux	12.0	Yes
Operating System	canonical	ubuntu_linux	22.04	Yes
Operating System	canonical	ubuntu_linux	22.10	Yes
Operating System	canonical	ubuntu_linux	23.04	Yes
Operating System	amazon	amazon_linux	2023.0	Yes
Application	netapp	active_iq_unified_manager	-	Yes
Application	netapp	e-series_santricity_os_controller	≤ 11.70.2	Yes
Application	netapp	ontap	9	Yes
Application	netapp	ontap_select_deploy_administration_utility	-	Yes
Application	netapp	ontap_tools	9	Yes
Application	netapp	ontap_tools	10	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.2	Yes
Operating System	freebsd	freebsd	13.3	Yes
Operating System	freebsd	freebsd	13.3	Yes
Operating System	freebsd	freebsd	13.3	Yes
Operating System	freebsd	freebsd	13.3	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.0	Yes
Operating System	freebsd	freebsd	14.1	Yes
Operating System	freebsd	freebsd	14.1	Yes
Operating System	netbsd	netbsd	≤ 10.0.0	Yes

References

https://access.redhat.com/errata/RHSA-2024:4312 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4340 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4389 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4469 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4474 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4479 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2024:4484 Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/CVE-2024-6387 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2294604 Third Party Advisory ([email protected])
https://santandersecurityresearch.github.io/blog/sshing_the_masses.html Exploit, Third Party Advisory ([email protected])
https://www.openssh.com/txt/release-9.8 Release Notes, Third Party Advisory ([email protected])
https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt Exploit, Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/01/12 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/01/13 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/02/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/11 Exploit, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/3 Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/4 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/03/5 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/04/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/04/2 Exploit, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/08/2 Exploit, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/08/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/09/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/09/5 Exploit, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/10/1 Exploit, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/10/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/10/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/10/4 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/10/6 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/11/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/11/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/23/4 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/23/6 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/28/2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/07/28/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4312 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4340 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4389 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4469 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4474 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4479 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2024:4484 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/CVE-2024-6387 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2294604 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://explore.alas.aws.amazon.com/CVE-2024-6387.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://forum.vmssoftware.com/viewtopic.php?f=8&t=9132 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/AlmaLinux/updates/issues/629 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/Azure/AKS/issues/4379 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/PowerShell/Win32-OpenSSH/discussions/2248 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/PowerShell/Win32-OpenSSH/issues/2249 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/microsoft/azurelinux/issues/9555 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/oracle/oracle-linux/issues/149 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rapier1/hpn-ssh/issues/87 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/zgzhang/cve-2024-6387-poc Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.almalinux.org/archives/list/[email protected]/thread/23BF5BMGFVEVUI2WNVAGMLKT557EU7VY/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html Mailing List, Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041431.html Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://news.ycombinator.com/item?id=40843778 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://packetstorm.news/files/id/190587/ Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://santandersecurityresearch.github.io/blog/sshing_the_masses.html Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security-tracker.debian.org/tracker/CVE-2024-6387 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240701-0001/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://sig-security.rocky.page/issues/CVE-2024-6387/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://stackdiary.com/openssh-race-condition-in-sshd-allows-remote-code-execution/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214118 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214119 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214120 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://ubuntu.com/security/CVE-2024-6387 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://ubuntu.com/security/notices/USN-6859-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/52269 Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openssh.com/txt/release-9.8 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.splunk.com/en_us/blog/security/cve-2024-6387-regresshion-vulnerability.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.suse.com/security/cve/CVE-2024-6387.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.theregister.com/2024/07/01/regresshion_openssh/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For sonicwall's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.