A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-keycat | Jul 9, 2024 | Jul 1, 2024 |
| Alpine Linux | — | Upgrade openssh | Aug 22, 2024 | Jul 1, 2024 |
| Amazon_linux_2023 | — | Upgrade openssh-debuginfoUpgrade openssh-clientsUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-debugsourceUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-keycat-debuginfoUpgrade openssh-server | Feb 17, 2025 | Jul 1, 2024 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Jul 31, 2024 | Jul 1, 2024 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 1, 2024 |
| Arista Eos | — | Upgrade to a fixed EOS release or apply the available hotfix. As a temporary mitigation, enable SSH service ACLs or disable the SSH login grace time. | Sep 4, 2024 | Jul 8, 2024 |
| Aruba Aos Cx | — | HPE Aruba Networking
- EdgeConnect SD-WAN Orchestrator
-Detailed information on the resolution of CVE-2024-6387 can be found at https://www.arubanetworks.com/techdocs/sdwan-PDFs/docs/advisories/orch_resolution_to_cve-2024-6387_latest.pdf
- ArubaOS-CX Switches
- 10.14.0007 and above
- 10.13.1031 and above
- 10.10.1131 and above
- Aruba Fabric Composer
- 7.0.3 and above
- HPE Networking Instant On
- Firmware version 3.0.0 and higher
- No direct customer action is necessary other than to ensure affected devices (APs and Switches in cloud mode) remain connected to the internet to receive automatic updates.
Software versions with resolution/fixes for the vulnerabilities
covered above, can be downloaded from the HPE Networking Support
Portal.
https://networkingsupport.hpe.com/home/
HPE Aruba Networking does not evaluate or patch product branches
that have reached their End of Maintenance (EoM) milestone.
For more information about HPE Aruba Networking products End of
Support policy visit: https://networkingsupport.hpe.com/end-of-life | Feb 24, 2025 | Jul 9, 2024 |
| Cisco Asa | — | Upgrade to the latest version of Cisco ASA to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Nx Os | — | Upgrade to the latest version of Cisco NX-OS to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE to resolve this vulnerability | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Xr Os | — | Upgrade to the latest version of Cisco IOS-XR to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Debian | — | Upgrade openssh | Jul 3, 2024 | Jul 1, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Dec 12, 2024 | Aug 14, 2024 |
| F5 Big Ip | — | — | Jul 31, 2024 | Jul 1, 2024 |
| Fortinet Fortianalyzer | — | Upgrade to the latest version of FortiAnalyzerUpgrade FortiAnalyzer to 7.4.4 | May 26, 2026 | Jul 9, 2024 |
| Fortinet Fortiauthenticator | — | Upgrade FortiAuthenticator to 6.6.2 | Aug 5, 2026 | Jul 9, 2024 |
| Fortinet Fortimanager | — | Upgrade to the latest version of FortiManager | May 25, 2026 | Jul 9, 2024 |
| Fortinet Fortiweb | — | Upgrade FortiWeb to 7.4.5Upgrade FortiWeb to 7.6.1Upgrade to the latest version of FortiWeb | Jun 30, 2026 | Jul 9, 2024 |
| Freebsd | — | Upgrade openssh-portableUpgrade FreeBSD | Jul 1, 2024 | Jul 1, 2024 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Jul 3, 2024 | Jul 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade openssh | Oct 8, 2024 | Jul 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade openssh | Oct 8, 2024 | Jul 1, 2024 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory17 | Jul 10, 2024 | Jul 1, 2024 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Jul 2, 2024 | Jul 1, 2024 |
| Oracle_linux | — | Upgrade opensshUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-server | Jul 1, 2024 | Jul 1, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Jul 17, 2024 | Jul 1, 2024 |
| Redhat_linux | — | Upgrade openssh-clientsUpgrade openssh-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-askpass-debuginfoUpgrade opensshUpgrade openssh-askpassUpgrade openssh-server-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-clients-debuginfo | Jul 4, 2024 | Jul 1, 2024 |
| Rocky_linux | — | Upgrade openssh-askpass-debuginfoUpgrade openssh-serverUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-keycat-debuginfoUpgrade openssh-askpassUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-clients | Jul 22, 2024 | Jul 1, 2024 |
| Sonicwall Gms | — | Update SonicWall GMS to version 9.4.2 or later | Sep 4, 2025 | Jul 1, 2024 |
| Suse | — | Upgrade openssh-commonUpgrade openssh-clientsUpgrade openssh-askpass-gnomeUpgrade opensshUpgrade openssh-helpersUpgrade openssh-fipsUpgrade openssh-server-config-disallow-rootloginUpgrade openssh-cavsUpgrade openssh-server-config-rootloginUpgrade openssh-server | Jul 3, 2024 | Jul 1, 2024 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-client | Jul 3, 2024 | Jul 1, 2024 |
| Vmware Esxi | — | Upgrade VMware ESXi 8.0.3 to build number 24585383 | Apr 10, 2025 | Feb 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 1, 2024 |
| Vmware Vcenter | — | — | Apr 10, 2025 | Feb 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub