A major security vulnerability has been found in OpenSSH, potentially leading to remote code execution as the root user on glibc-based Linux systems. It is being referred to as regreSSHion (CVE-2024-6387). This flaw affects versions 8.5p1 to 9.7p1 due to a signal handler race condition in sshd, and it has been identified in 14 million instances.
According to Qualys data, there are 14 million potentially vulnerable OpenSSH servers. Out of these, 700,000 are exposed to the internet, posing a significant risk.
Credits to Alexander Hagenah, Cybersecurity Leader, for rapidly developing the detection script for the CVE-2024-6387 vulnerability.
@cybersecurityclub @Code_Security
Негізгі бет CVE-2024-6387 - Detection & Fixing - CodeAnt AI, Inc.
Пікірлер: 3