Shortened for this page: references: 10 of 93 shown; configurations: 10 of 41 shown; enrichment.cpe: first 10 items
{
"id": "CVE-2024-6387",
"source_identifier": "user@redhat.com",
"published": "2024-07-01T13:15:06Z",
"last_modified": "2026-09-01T12:17:13Z",
"status": "Modified",
"evaluator_comment": null,
"evaluator_solution": null,
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period."
},
{
"lang": "es",
"value": "Se encontró una condición de ejecución del controlador de señales en el servidor de OpenSSH (sshd), donde un cliente no se autentica dentro de los segundos de LoginGraceTime (120 de forma predeterminada, 600 en versiones anteriores de OpenSSH), luego se llama al controlador SIGALRM de sshd de forma asincrónica. Sin embargo, este controlador de señales llama a varias funciones que no son seguras para señales asíncronas, por ejemplo, syslog()."
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:4312",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4340",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4389",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4469",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4474",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4479",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4484",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-6387",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294604",
"source": "user@redhat.com",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://santandersecurityresearch.github.io/blog/sshing_the_masses.html",
"source": "user@redhat.com",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": [
{
"source": "user@redhat.com",
"type": "Secondary",
"cvss_data": {
"version": "3.1",
"vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "NETWORK",
"attack_complexity": "HIGH",
"privileges_required": "NONE",
"user_interaction": "NONE",
"scope": "UNCHANGED",
"confidentiality_impact": "HIGH",
"integrity_impact": "HIGH",
"availability_impact": "HIGH",
"base_score": 8.1,
"base_severity": "HIGH",
"exploit_code_maturity": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"temporal_severity": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_scope": null,
"modified_confidentiality_impact": null,
"modified_integrity_impact": null,
"modified_availability_impact": null,
"environmental_score": null,
"environmental_severity": null
},
"exploitability_score": 2.2,
"impact_score": 5.9
},
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "3.1",
"vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "NETWORK",
"attack_complexity": "HIGH",
"privileges_required": "NONE",
"user_interaction": "NONE",
"scope": "UNCHANGED",
"confidentiality_impact": "HIGH",
"integrity_impact": "HIGH",
"availability_impact": "HIGH",
"base_score": 8.1,
"base_severity": "HIGH",
"exploit_code_maturity": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"temporal_severity": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_scope": null,
"modified_confidentiality_impact": null,
"modified_integrity_impact": null,
"modified_availability_impact": null,
"environmental_score": null,
"environmental_severity": null
},
"exploitability_score": 2.2,
"impact_score": 5.9
}
],
"cvss_metric_v30": null,
"cvss_metric_v2": null
},
"weaknesses": [
{
"source": "user@redhat.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-364"
}
]
},
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "92EF92CC-8175-4319-A529-AF979BAE5FCE",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*",
"match_criteria_id": "17BDC1B0-BE6A-4680-A78E-5338AD709095",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "2FCBF1E6-3A6E-430A-AB34-AA48D4478C5F",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*",
"match_criteria_id": "4C366A02-074C-4F98-AE68-30E0FF85CD00",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
"match_criteria_id": "A5DA3089-31AA-499E-9C23-788503BE55B7",
"version_start_including": "4.32.0",
"version_start_excluding": null,
"version_end_including": "4.32.1f",
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*",
"match_criteria_id": "602CE21C-E1A9-4407-A504-CF4E58F596F5",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*",
"match_criteria_id": "BF90B5A4-6E55-4369-B9D4-E7A061E797D2",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*",
"match_criteria_id": "57B93E9A-1483-4FF7-BF45-BD0D7D9F1747",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "F87F7D08-7A28-493A-96BB-74C142109F8D",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*",
"match_criteria_id": "0734D1E1-2F59-4832-875F-AB03994B8992",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_7210_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "7592AE3D-D749-4494-9A55-71E2FD9BDFC0",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*",
"match_criteria_id": "A15BA659-19D1-49AA-B249-EAE5E63B9B9A",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_8200v_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "3CE83596-82B9-4656-8E50-50D79DF06FB0",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_8200v:-:*:*:*:*:*:*:*",
"match_criteria_id": "68369A76-B0C3-4736-9EE6-4E0034111591",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sra_ex_7000_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "CCF845D8-65AE-4165-9742-B56E86AB7D21",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sra_ex_7000:-:*:*:*:*:*:*:*",
"match_criteria_id": "0D435EFD-7B02-4921-8AC5-BBF07277F4B2",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": "AND",
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:netapp:a1k_firmware:-:*:*:*:*:*:*:*",
"match_criteria_id": "7F65C59D-249A-4790-892C-B78CF82E51CF",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
},
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:netapp:a1k:-:*:*:*:*:*:*:*",
"match_criteria_id": "8E0E9D71-AF09-41F4-A1C7-94F616AF2832",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_6200_firmware",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:sonicwall:sma_6200_firmware:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_6200",
"product_type": "h",
"vulnerable": false,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_7200_firmware",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:sonicwall:sma_7200_firmware:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_7200",
"product_type": "h",
"vulnerable": false,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
"vendor": "arista",
"product": "eos",
"product_type": "o",
"vulnerable": true,
"version_start_including": "4.32.0",
"version_start_excluding": null,
"version_end_including": "4.32.1f",
"version_end_excluding": null,
"affected_versions_first": "4.32.0",
"affected_versions_last": "4.32.1",
"affected_versions": [
"4.32.0",
"4.32.1"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:arista:eos:4.32.0:*:*:*:*:*:*:*",
"deprecated": false
},
{
"cpe_name": "cpe:2.3:o:arista:eos:4.32.1:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "23.10",
"affected_versions_last": "23.10",
"affected_versions": [
"23.10"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:canonical:ubuntu_linux:23.10:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "24.04",
"affected_versions_last": "24.04",
"affected_versions": [
"24.04"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*",
"vendor": "almalinux",
"product": "almalinux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "9.0",
"affected_versions_last": "9.0",
"affected_versions": [
"9.0"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_6210_firmware",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:o:sonicwall:sma_6210_firmware:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
},
{
"criteria": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*",
"vendor": "sonicwall",
"product": "sma_6210",
"product_type": "h",
"vulnerable": false,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": null,
"affected_versions_last": null,
"affected_versions": [
"-"
],
"cpe_names": [
{
"cpe_name": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*",
"deprecated": false
}
]
}
],
"cwe": [
{
"id": 362,
"owasptop10_2021": null,
"name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
"description": "The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.",
"capec_id": [
26,
29
],
"scope": [
"Access Control",
"Availability",
"Confidentiality",
"Integrity"
],
"impact": [
"Bypass Protection Mechanism",
"DoS: Crash, Exit, or Restart",
"DoS: Instability",
"DoS: Resource Consumption (CPU)",
"DoS: Resource Consumption (Memory)",
"DoS: Resource Consumption (Other)",
"Execute Unauthorized Code or Commands",
"Gain Privileges or Assume Identity",
"Read Application Data",
"Read Files or Directories"
],
"detection_method": [
"Architecture or Design Review",
"Automated Dynamic Analysis",
"Automated Static Analysis - Binary or Bytecode",
"Automated Static Analysis - Source Code",
"Black Box",
"Dynamic Analysis with Automated Results Interpretation",
"Dynamic Analysis with Manual Results Interpretation",
"Manual Static Analysis - Source Code",
"White Box"
]
},
{
"id": 364,
"owasptop10_2021": null,
"name": "Signal Handler Race Condition",
"description": "The product uses a signal handler that introduces a race condition.",
"capec_id": null,
"scope": [
"Access Control",
"Availability",
"Confidentiality",
"Integrity"
],
"impact": [
"DoS: Crash, Exit, or Restart",
"Execute Unauthorized Code or Commands",
"Gain Privileges or Assume Identity",
"Modify Application Data",
"Modify Memory"
],
"detection_method": [
"Automated Static Analysis"
]
}
],
"epss_score": {
"epss": 0.99506,
"percentile": 0.99944,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"3.1"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "3.1",
"vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "NETWORK",
"attack_complexity": "HIGH",
"attack_requirements": null,
"privileges_required": "NONE",
"user_interaction": "NONE",
"vulnerable_system_confidentiality": "HIGH",
"vulnerable_system_integrity": "HIGH",
"vulnerable_system_availability": "HIGH",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 8.1,
"base_severity": "HIGH"
}
}
}
}