CVE-2024-6387

✓ Confirmed 0-Day

Triaged: March 5, 2026 6 articles Published: 2024-07-01

VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24

63.05%

probability

This CVE has a 63.05% probability of being exploited in the next 30 days.

0% Top 98.4th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

8.1

HIGH

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

VulnerabilityLookup (CNA)

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Affected Products

8.5p1

Red Hat

Red Hat Enterprise Linux 9

0:8.7p1-38.el9_4.1

Red Hat

Red Hat Enterprise Linux 9

0:8.7p1-38.el9_4.1

Red Hat

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

0:8.7p1-12.el9_0.1

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

0:8.7p1-30.el9_2.4

Attack Intelligence

CWE-362 · Race Condition CWE-364 · Signal Handler Race Condition CWE-691 · Insufficient Control Flow Management

Exploits & PoC

xaitax/CVE-2024-6387_Check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

522

zgzhang/cve-2024-6387-poc

a signal handler race condition in OpenSSH's server (sshd)

492

acrono/cve-2024-6387-poc

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

382

Karmakstylez/CVE-2024-6387

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

179

lflare/cve-2024-6387-poc

MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc

126

l0n3m4n/CVE-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

101

filipi86/CVE-2024-6387-Vulnerability-Checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The

100

xonoxitron/regreSSHion

CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.

d0rb/CVE-2024-6387

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

bigb0x/CVE-2024-6387

Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.

10 repos — triés par ⭐ Rechercher sur GitHub ↗

https://access.redhat.com/errata/RHSA-2024:4312