CVE-2024-6409
HIGH EPSS 97.9%
Published Jul 8, 20241y ago · Modified Jun 17, 20262w ago
7.0 CVSS 3.1
Published Jul 8, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). As a consequence of a successful attack, in the worst case scenario, an attacker may be able to perform a remote code execution (RCE) as an unprivileged user running the sshd server.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability High
Threat Intelligence
EPSS Exploit Probability
97.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-364
References 23
- openwall.com http://www.openwall.com/lists/oss-security/2024/07/08/2
- openwall.com http://www.openwall.com/lists/oss-security/2024/07/09/2
- openwall.com http://www.openwall.com/lists/oss-security/2024/07/09/5
- openwall.com http://www.openwall.com/lists/oss-security/2024/07/10/1
- openwall.com http://www.openwall.com/lists/oss-security/2024/07/10/2
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4457
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4613
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4716
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4910
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4955
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:4960
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:5444
- access.redhat.com https://access.redhat.com/security/cve/CVE-2024-6409
- almalinux.org https://almalinux.org/blog/2024-07-09-cve-2024-6409/
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2295085
- bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1227217
- explore.alas.aws.amazon.com https://explore.alas.aws.amazon.com/CVE-2024-6409.html
- github.com https://github.com/openela-main/openssh/commit/c00da7741d42029e49047dd89e266d91dcfbffa0
- security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2024-6409
- security.netapp.com https://security.netapp.com/advisory/ntap-20240712-0003/
- sig-security.rocky.page https://sig-security.rocky.page/issues/CVE-2024-6409/
- ubuntu.com https://ubuntu.com/security/CVE-2024-6409
- suse.com https://www.suse.com/security/cve/CVE-2024-6409.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.