CVE-2024-6387
Openssh: regresshion - race condition in ssh allows rce/dos
HIGH 8.1EPSS 99.5%
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
- Affected
- Red Hat · OpenSSH · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Red Hat Enterprise Linux 9.2 Extended Update Support · Red Hat OpenShift Container Platform 4.13 · Red Hat OpenShift Container Platform 4.14
- CVSS v3.1 NVD
- 8.1 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 99.51% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2024-07-01
- Updated
- 2026-10-15
Proof-of-concept exploits (82)
- zgzhang/cve-2024-6387-poc496★ · 2024-07-01
- https://santandersecurityresearch.github.io/blog/sshing_the_masses.html
- https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6…
- 0x4D31/cve-2024-6387_hassh10★ · 2024-07-05
- 3yujw7njai/CVE-2024-63879★ · 2024-07-02
- 4lxprime/regreSSHive0★ · 2024-07-04
- AiGptCode/ssh_exploiter_CVE-2024-638710★ · 2024-07-04
- AiK1d/CVE-2024-63879★ · 2024-07-02
- AzrDll/CVE-2024-63874★ · 2025-01-20
- DimaMend/cve-2024-6387-poc0★ · 2024-07-10
- FerasAlrimali/CVE-2024-6387-POC0★ · 2024-07-01
- Jhonsonwannaa/CVE-2024-63870★ · 2025-02-22
- Karmakstylez/CVE-2024-6387196★ · 2024-08-22
- MrR0b0t19/CVE-2024-6387-Exploit-POC4★ · 2024-07-02
- MrR0b0t19/CVE-6387-SSH-v22★ · 2024-07-11
- Mufti22/CVE-2024-6387-checkher0★ · 2024-07-02
- P4x1s/CVE-2024-638710★ · 2024-07-02
- PrincipalAnthony/CVE-2024-6387-Updated-x64bit3★ · 2024-07-02
- R4Tw1z/CVE-2024-63871★ · 2024-07-02
- Symbolexe/CVE-2024-63873★ · 2024-07-04
- TAM-K592/CVE-2024-638714★ · 2024-07-02
- ThatNotEasy/CVE-2024-63873★ · 2024-07-15
- ThemeHackers/CVE-2024-63874★ · 2024-08-22
- YassDEV221608/CVE-2024-63870★ · 2024-11-24
- YassDEV221608/CVE-2024-6387_PoC16★ · 2025-01-04
- acrono/cve-2024-6387-poc376★ · 2024-07-01
- ahlfors/CVE-2024-63872★ · 2024-07-02
- alex14324/ssh_poc20241★ · 2024-07-31
- anhvutuan/CVE-2024-6387-poc-12★ · 2024-07-11
- asterictnl-lvdw/CVE-2024-6387196★ · 2024-08-22
- awusan125/test_for63873★ · 2024-12-22
- beac0n/ruroco556★ · 2026-07-26
- d0rb/CVE-2024-638752★ · 2024-07-04
- dawnl3ss/CVE-2024-63870★ · 2024-07-02
- dream434/CVE-2024-63870★ · 2025-02-22
- getdrive/CVE-2024-6387-PoC23★ · 2024-07-01
- grupooruss/CVE-2024-63872★ · 2024-07-02
- grupooruss/CVE-2024-6387-Tester2★ · 2024-07-02
- h3x0crypt/SpicyShell1★ · 2024-07-02
- hssmo/cve-2024-6387_AImade0★ · 2024-07-02
- identity-threat-labs/Article-RegreSSHion-CVE-2024-63871★ · 2024-08-29
- imv7/CVE-2024-63870★ · 2024-07-05
- invaderslabs/regreSSHion-CVE-2024-6387-0★ · 2024-07-04
- jack0we/CVE-2024-63870★ · 2024-07-01
- jocker2410/CVE-2024-6387_poc0★ · 2024-08-04
- l-urk/CVE-2024-638712★ · 2024-10-19
- l-urk/CVE-2024-6387-L12★ · 2024-10-19
- l0n3m4n/CVE-2024-6387114★ · 2024-07-05
- lala-amber/CVE-2024-63874★ · 2024-07-04
- lflare/cve-2024-6387-poc128★ · 2024-07-25
- moften/regreSSHion-CVE-2024-63870★ · 2025-09-08
- mrmtwoj/CVE-2024-63870★ · 2024-07-09
- muyuanlove/CVE-2024-6387fixshell2★ · 2024-07-02
- n1cks0n/Test_CVE-2024-63871★ · 2024-07-02
- paradessia/CVE-2024-6387-nmap4★ · 2024-07-02
- passwa11/cve-2024-6387-poc1★ · 2024-07-01
- prelearn-code/CVE-2024-63872★ · 2024-07-25
- rumochnaya/openssh-cve-2024-6387.sh1★ · 2024-07-02
- s1d6point7bugcrowd/CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH0★ · 2024-08-19
- shamo0/CVE-2024-6387_PoC1★ · 2024-07-02
- sms2056/CVE-2024-63870★ · 2024-07-04
- stephenmuema/regreSSHion0★ · 2024-08-02
- sxlmnwb/CVE-2024-638721★ · 2024-07-03
- t3rry327/cve-2024-6387-poc0★ · 2024-07-03
- th3gokul/CVE-2024-63874★ · 2024-07-02
- thegenetic/CVE-2024-6387-exploit13★ · 2024-07-02
- xonoxitron/regreSSHion71★ · 2024-07-02
- 7etsuo/cve-2024-6387-poc1★ · 2024-07-01
- HadesNull123/CVE-2024-6387_Check0★ · 2024-08-26
- devarshishimpi/CVE-2024-6387-Check14★ · 2024-07-08
- hasan8babiker/CVE-2024-63870★ · 2026-08-06
- kaleth4/CVE-2024-63870★ · 2026-04-02
- kinu404/CVE-2024-63874★ · 2025-01-20
- particle99/CVE-2024-6387-POC0★ · 2024-07-02
- vuducmanhno100-cloud/CVE-2024-63870★ · 2026-05-22
- evilbotnet/ilovemalware0★ · 2026-10-13
- hackingyseguridad/ssha6★ · 2026-07-23
- jasonnorman66994-dot/sovereign-command-center0★ · 2026-04-21
- ptn1411/skill230★ · 2026-09-22
- Panche1/SSHPentest2★ · 2026-09-12
- hungln105-cell/skill-bug-app0★ · 2026-09-18
- domanhcuongkent1991-blip/security-tool0★ · 2026-09-25
ExploitDB entries (1)
Security advisories
- https://access.redhat.com/errata/RHSA-2024:4312
- https://access.redhat.com/errata/RHSA-2024:4340
- https://access.redhat.com/errata/RHSA-2024:4389
- https://access.redhat.com/errata/RHSA-2024:4469
- https://access.redhat.com/errata/RHSA-2024:4474
- https://access.redhat.com/errata/RHSA-2024:4479
- https://access.redhat.com/errata/RHSA-2024:4484
- https://access.redhat.com/security/cve/CVE-2024-6387
- https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-open…
- https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attac…
- https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-una…
- https://bugzilla.redhat.com/show_bug.cgi?id=2294604
- https://explore.alas.aws.amazon.com/CVE-2024-6387.html
- https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/thread/23BF5BMGFVE…
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010
- https://security-tracker.debian.org/tracker/CVE-2024-6387
- https://security.netapp.com/advisory/ntap-20240701-0001
- https://sig-security.rocky.page/issues/CVE-2024-6387
- https://stackdiary.com/openssh-race-condition-in-sshd-allows-remote-code-execution
- https://support.apple.com/kb/HT214118
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214120
- https://ubuntu.com/security/CVE-2024-6387
- https://ubuntu.com/security/notices/USN-6859-1
- https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-…
- https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-adv…
- https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc
- https://www.openssh.com/txt/release-9.8
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
- https://www.splunk.com/en_us/blog/security/cve-2024-6387-regresshion-vulnerability.html
- https://www.suse.com/security/cve/CVE-2024-6387.html
- https://www.theregister.com/2024/07/01/regresshion_openssh
- http://www.openwall.com/lists/oss-security/2024/07/03/3
- openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09
- https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041431.html
- https://news.ycombinator.com/item?id=40843778
- https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc
- https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html
- https://forum.vmssoftware.com/viewtopic.php?f=8&t=9132
- AlmaLinux/updates/issues/629
- Azure/AKS/issues/4379
- PowerShell/Win32-OpenSSH/issues/2249
- microsoft/azurelinux/issues/9555
- oracle/oracle-linux/issues/149
- rapier1/hpn-ssh/issues/87