Поиск уязвимостей
Количество 17
Количество 17
CVE-2024-6387
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVE-2024-6387
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVE-2024-6387
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVE-2024-6387
RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling
CVE-2024-6387
A security regression (CVE-2006-5051) was discovered in OpenSSH's serv ...
SUSE-SU-2024:2275-2
Security update for openssh
SUSE-SU-2024:2275-1
Security update for openssh
GHSA-2x8c-95vh-gfv4
A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().
ELSA-2024-4312
ELSA-2024-4312: openssh security update (IMPORTANT)
ELSA-2024-12468
ELSA-2024-12468: openssh security update (IMPORTANT)
BDU:2024-04914
Уязвимость сервера средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольный код
ALT-PU-2024-9505
ALT-PU-2024-9505: package `openssh` update to version 9.6p1-alt2
ROS-20260728-80-0011
Уязвимость openssh
ROS-20240704-01
Уязвимость openssh
BDU:2024-06777
Уязвимость обработчика сигналов в sshd(8) операционной системы FreeBSD, позволяющая нарушителю выполнить произвольный код в контексте root
ALT-PU-2024-3921
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
ALT-PU-2024-9513
ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
 | CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
 | CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
 | CVE-2024-6387 RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
| CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's serv ... | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
 | SUSE-SU-2024:2275-2 Security update for openssh | 100% Критический | больше 2 лет назад | |
| SUSE-SU-2024:2275-1 Security update for openssh | 100% Критический | больше 2 лет назад | |
| GHSA-2x8c-95vh-gfv4 A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
| ELSA-2024-4312 ELSA-2024-4312: openssh security update (IMPORTANT) | 100% Критический | больше 2 лет назад | |
| ELSA-2024-12468 ELSA-2024-12468: openssh security update (IMPORTANT) | 100% Критический | больше 2 лет назад | |
 | BDU:2024-04914 Уязвимость сервера средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольный код | CVSS3: 9 | 100% Критический | больше 2 лет назад |
| ALT-PU-2024-9505 ALT-PU-2024-9505: package `openssh` update to version 9.6p1-alt2 | CVSS3: 8.1 | 100% Критический | больше 2 лет назад |
 | ROS-20260728-80-0011 Уязвимость openssh | CVSS3: 9 | 100% Критический | 4 месяца назад |
| ROS-20240704-01 Уязвимость openssh | CVSS2: 7.6 | 100% Критический | больше 2 лет назад |
| BDU:2024-06777 Уязвимость обработчика сигналов в sshd(8) операционной системы FreeBSD, позволяющая нарушителю выполнить произвольный код в контексте root | CVSS3: 8.1 | 2% Низкий | около 2 лет назад |
| ALT-PU-2024-3921 ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-9513 ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost | CVSS3: 9.8 | больше 2 лет назад |
Уязвимостей на страницу