Blog

Security Research

Guidance on the Critical OpenSSH Vulnerability regreSSHion

From our observations, 75% of networks had some machines with a vulnerable version of OpenSSH.

Executive summary

\r\n CVE-2024-6387 is a critical remote code execution (RCE) vulnerability in OpenSSH that stems from a regression of a CVE from 2006.

\r\n

\r\n Exploitation requires winning a race condition, and could take hours or even weeks to successfully exploit.

\r\n

\r\n The recommended course of action is patching to an unaffected version of the OpenSSH server on glibc-based Linux systems.…