CVE-2024-6387 – regreSSHion Remote Code Execution vulnerability seen in OpenSSH

Earlier this week, on Monday, July 1st, a security regression (CVE-2006-5051) was published in OpenSSH’s server (sshd). Basically, there is a race condition that can lead sshd to handle some signals in an unsafe manner. The worry is that an unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set period. What is OpenSSH? OpenSSH is the premier connectivity tool for remote login using the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides an extensive suite of secure tunneling capabilities, several authentication methods, and […]

The post CVE-2024-6387 – regreSSHion Remote Code Execution vulnerability seen in OpenSSH appeared first on Check Point Blog.



from Check Point Blog https://ift.tt/e8ChvlO
via

No comments:

Post a Comment

Securing Your AI Transformation: How Check Point Is Helping Security Teams Keep Control in an AI-First World

AI is moving faster than most security teams can keep up with. As AI reshapes how work gets done, and how attacks are carried out, Check Po...