# OpenSSH regreSSHion (CVE-2024-6387) regreSSHion, the OpenSSH signal handler race, with CVSS v3.1 8.1 and a product list full of appliances that ship OpenSSH. Source: https://docs.deepinfo.com/reference/vulnerability/detail/examples/cve-2024-6387/ Last updated: 2026-09-24 --- `GET https://api.deepinfo.com/v1/discovery/vulnerability-detail?cve=CVE-2024-6387` regreSSHion, the OpenSSH signal handler race, with CVSS v3.1 8.1 and a product list full of appliances that ship OpenSSH. Example 7 of 7 in **Well-Known CVEs** · [Vulnerability Detail Examples](/reference/vulnerability/detail/examples/) · endpoint: [Detail](/reference/vulnerability/detail/) Tags: `param` `cve` · `value` `CVE-2024-6387` Asks for `CVE-2024-6387`, the OpenSSH server race condition. ## What to Notice - `enrichment.cwe` has CWE-362 and CWE-364 (race conditions). - `enrichment.cpe` starts with SonicWall appliances: products that bundle OpenSSH are listed next to OpenSSH itself. - `enrichment.cisa_kev` is `null` even though `enrichment.epss_score.epss` is high. ## Request | Parameter | In | Value | |---|---|---| | `cve` | query | `CVE-2024-6387` | ```bash curl 'https://api.deepinfo.com/v1/discovery/vulnerability-detail?cve=CVE-2024-6387' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' ``` ## Response ### 200 · OK > Shortened for this page: references: 10 of 93 shown; configurations: 10 of 41 shown; enrichment.cpe: first 10 items `Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "id": "CVE-2024-6387", "source_identifier": "user@redhat.com", "published": "2024-07-01T13:15:06Z", "last_modified": "2026-09-01T12:17:13Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period." }, { "lang": "es", "value": "Se encontró una condición de ejecución del controlador de señales en el servidor de OpenSSH (sshd), donde un cliente no se autentica dentro de los segundos de LoginGraceTime (120 de forma predeterminada, 600 en versiones anteriores de OpenSSH), luego se llama al controlador SIGALRM de sshd de forma asincrónica. Sin embargo, este controlador de señales llama a varias funciones que no son seguras para señales asíncronas, por ejemplo, syslog()." } ], "references": [ { "url": "https://access.redhat.com/errata/RHSA-2024:4312", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4340", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4389", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4469", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4474", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4479", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/errata/RHSA-2024:4484", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://access.redhat.com/security/cve/CVE-2024-6387", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294604", "source": "user@redhat.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://santandersecurityresearch.github.io/blog/sshing_the_masses.html", "source": "user@redhat.com", "tags": [ "Exploit", "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": [ { "source": "user@redhat.com", "type": "Secondary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "HIGH", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "UNCHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 8.1, "base_severity": "HIGH", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 2.2, "impact_score": 5.9 }, { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "HIGH", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "UNCHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 8.1, "base_severity": "HIGH", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 2.2, "impact_score": 5.9 } ], "cvss_metric_v30": null, "cvss_metric_v2": null }, "weaknesses": [ { "source": "user@redhat.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-364" } ] }, { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-362" } ] } ], "configurations": [ { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "92EF92CC-8175-4319-A529-AF979BAE5FCE", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*", "match_criteria_id": "17BDC1B0-BE6A-4680-A78E-5338AD709095", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "2FCBF1E6-3A6E-430A-AB34-AA48D4478C5F", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*", "match_criteria_id": "4C366A02-074C-4F98-AE68-30E0FF85CD00", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "match_criteria_id": "A5DA3089-31AA-499E-9C23-788503BE55B7", "version_start_including": "4.32.0", "version_start_excluding": null, "version_end_including": "4.32.1f", "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*", "match_criteria_id": "602CE21C-E1A9-4407-A504-CF4E58F596F5", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*", "match_criteria_id": "BF90B5A4-6E55-4369-B9D4-E7A061E797D2", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*", "match_criteria_id": "57B93E9A-1483-4FF7-BF45-BD0D7D9F1747", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "F87F7D08-7A28-493A-96BB-74C142109F8D", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*", "match_criteria_id": "0734D1E1-2F59-4832-875F-AB03994B8992", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sma_7210_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "7592AE3D-D749-4494-9A55-71E2FD9BDFC0", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*", "match_criteria_id": "A15BA659-19D1-49AA-B249-EAE5E63B9B9A", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sma_8200v_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "3CE83596-82B9-4656-8E50-50D79DF06FB0", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sma_8200v:-:*:*:*:*:*:*:*", "match_criteria_id": "68369A76-B0C3-4736-9EE6-4E0034111591", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:sonicwall:sra_ex_7000_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "CCF845D8-65AE-4165-9742-B56E86AB7D21", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:sonicwall:sra_ex_7000:-:*:*:*:*:*:*:*", "match_criteria_id": "0D435EFD-7B02-4921-8AC5-BBF07277F4B2", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:netapp:a1k_firmware:-:*:*:*:*:*:*:*", "match_criteria_id": "7F65C59D-249A-4790-892C-B78CF82E51CF", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:h:netapp:a1k:-:*:*:*:*:*:*:*", "match_criteria_id": "8E0E9D71-AF09-41F4-A1C7-94F616AF2832", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_6200_firmware", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_6200", "product_type": "h", "vulnerable": false, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_7200_firmware", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_7200", "product_type": "h", "vulnerable": false, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*", "vendor": "arista", "product": "eos", "product_type": "o", "vulnerable": true, "version_start_including": "4.32.0", "version_start_excluding": null, "version_end_including": "4.32.1f", "version_end_excluding": null, "affected_versions_first": "4.32.0", "affected_versions_last": "4.32.1", "affected_versions": [ "4.32.0", "4.32.1" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:arista:eos:4.32.0:*:*:*:*:*:*:*", "deprecated": false }, { "cpe_name": "cpe:2.3:o:arista:eos:4.32.1:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "23.10", "affected_versions_last": "23.10", "affected_versions": [ "23.10" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "24.04", "affected_versions_last": "24.04", "affected_versions": [ "24.04" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*", "vendor": "almalinux", "product": "almalinux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "9.0", "affected_versions_last": "9.0", "affected_versions": [ "9.0" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_6210_firmware", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*", "deprecated": false } ] }, { "criteria": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*", "vendor": "sonicwall", "product": "sma_6210", "product_type": "h", "vulnerable": false, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null, "affected_versions": [ "-" ], "cpe_names": [ { "cpe_name": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*", "deprecated": false } ] } ], "cwe": [ { "id": 362, "owasptop10_2021": null, "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "description": "The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.", "capec_id": [ 26, 29 ], "scope": [ "Access Control", "Availability", "Confidentiality", "Integrity" ], "impact": [ "Bypass Protection Mechanism", "DoS: Crash, Exit, or Restart", "DoS: Instability", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "DoS: Resource Consumption (Other)", "Execute Unauthorized Code or Commands", "Gain Privileges or Assume Identity", "Read Application Data", "Read Files or Directories" ], "detection_method": [ "Architecture or Design Review", "Automated Dynamic Analysis", "Automated Static Analysis - Binary or Bytecode", "Automated Static Analysis - Source Code", "Black Box", "Dynamic Analysis with Automated Results Interpretation", "Dynamic Analysis with Manual Results Interpretation", "Manual Static Analysis - Source Code", "White Box" ] }, { "id": 364, "owasptop10_2021": null, "name": "Signal Handler Race Condition", "description": "The product uses a signal handler that introduces a race condition.", "capec_id": null, "scope": [ "Access Control", "Availability", "Confidentiality", "Integrity" ], "impact": [ "DoS: Crash, Exit, or Restart", "Execute Unauthorized Code or Commands", "Gain Privileges or Assume Identity", "Modify Application Data", "Modify Memory" ], "detection_method": [ "Automated Static Analysis" ] } ], "epss_score": { "epss": 0.99506, "percentile": 0.99944, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.1" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "HIGH", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 8.1, "base_severity": "HIGH" } } } } ``` ## Related Examples - [XZ Utils Backdoor (CVE-2024-3094)](/reference/vulnerability/detail/examples/cve-2024-3094/) - [Citrix Bleed (CVE-2023-4966)](/reference/vulnerability/detail/examples/cve-2023-4966/) - [Log4Shell (CVE-2021-44228)](/reference/vulnerability/detail/examples/cve-2021-44228/) - [EternalBlue (CVE-2017-0144)](/reference/vulnerability/detail/examples/cve-2017-0144/) - [Shellshock (CVE-2014-6271)](/reference/vulnerability/detail/examples/cve-2014-6271/) - [Heartbleed (CVE-2014-0160)](/reference/vulnerability/detail/examples/cve-2014-0160/)