A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-keycat | Jul 9, 2024 | Jul 1, 2024 |
| Alpine Linux | — | Upgrade openssh | Aug 22, 2024 | Jul 1, 2024 |
| Amazon_linux_2023 | — | Upgrade openssh-debuginfoUpgrade openssh-clientsUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-debugsourceUpgrade openssh-keycat-debuginfoUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_auth | Feb 17, 2025 | Jul 1, 2024 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Jul 31, 2024 | Jul 1, 2024 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 1, 2024 |
| Arista Eos | — | Upgrade to a fixed EOS release or apply the available hotfix. As a temporary mitigation, enable SSH service ACLs or disable the SSH login grace time. | Sep 4, 2024 | Jul 8, 2024 |
| Aruba Aos Cx | — | HPE Aruba Networking
- EdgeConnect SD-WAN Orchestrator
-Detailed information on the resolution of CVE-2024-6387 can be found at https://www.arubanetworks.com/techdocs/sdwan-PDFs/docs/advisories/orch_resolution_to_cve-2024-6387_latest.pdf
- ArubaOS-CX Switches
- 10.14.0007 and above
- 10.13.1031 and above
- 10.10.1131 and above
- Aruba Fabric Composer
- 7.0.3 and above
- HPE Networking Instant On
- Firmware version 3.0.0 and higher
- No direct customer action is necessary other than to ensure affected devices (APs and Switches in cloud mode) remain connected to the internet to receive automatic updates.
Software versions with resolution/fixes for the vulnerabilities
covered above, can be downloaded from the HPE Networking Support
Portal.
https://networkingsupport.hpe.com/home/
HPE Aruba Networking does not evaluate or patch product branches
that have reached their End of Maintenance (EoM) milestone.
For more information about HPE Aruba Networking products End of
Support policy visit: https://networkingsupport.hpe.com/end-of-life | Feb 24, 2025 | Jul 9, 2024 |
| Cisco Asa | — | Upgrade to the latest version of Cisco ASA to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Nx Os | — | Upgrade to the latest version of Cisco NX-OS to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE to resolve this vulnerability | Jul 23, 2024 | Jul 2, 2024 |
| Cisco Xr Os | — | Upgrade to the latest version of Cisco IOS-XR to resolve this vulnerability. | Jul 23, 2024 | Jul 2, 2024 |
| Debian | — | Upgrade openssh | Jul 3, 2024 | Jul 1, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Dec 12, 2024 | Aug 14, 2024 |
| F5 Big Ip | — | — | Jul 31, 2024 | Jul 1, 2024 |
| Fortinet Fortianalyzer | — | Upgrade to the latest version of FortiAnalyzer | May 26, 2026 | Jul 9, 2024 |
| Fortinet Fortiauthenticator | — | Upgrade FortiAuthenticator to 6.6.2 | Aug 5, 2026 | Jul 9, 2024 |
| Fortinet Fortimanager | — | Upgrade to the latest version of FortiManager | May 25, 2026 | Jul 9, 2024 |
| Fortinet Fortiweb | — | Upgrade to the latest version of FortiWeb | Jun 30, 2026 | Jul 9, 2024 |
| Freebsd | — | Upgrade openssh-portableUpgrade FreeBSD | Jul 1, 2024 | Jul 1, 2024 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Jul 3, 2024 | Jul 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade openssh | Oct 8, 2024 | Jul 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Oct 8, 2024 | Jul 1, 2024 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory17 | Jul 10, 2024 | Jul 1, 2024 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Jul 2, 2024 | Jul 1, 2024 |
| Oracle_linux | — | Upgrade opensshUpgrade openssh-askpassUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-server | Jul 1, 2024 | Jul 1, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Jul 17, 2024 | Jul 1, 2024 |
| Redhat_linux | — | Upgrade openssh-clients-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-askpassUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-askpass-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clientsUpgrade openssh-debuginfoUpgrade openssh | Jul 4, 2024 | Jul 1, 2024 |
| Rocky_linux | — | Upgrade openssh-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-server-debuginfoUpgrade opensshUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-askpass | Jul 22, 2024 | Jul 1, 2024 |
| Sonicwall Gms | — | Update SonicWall GMS to version 9.4.2 or later | Sep 4, 2025 | Jul 1, 2024 |
| Suse | — | Upgrade openssh-server-config-rootloginUpgrade openssh-cavsUpgrade openssh-serverUpgrade opensshUpgrade openssh-clientsUpgrade openssh-server-config-disallow-rootloginUpgrade openssh-helpersUpgrade openssh-commonUpgrade openssh-fipsUpgrade openssh-askpass-gnome | Jul 3, 2024 | Jul 1, 2024 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-client | Jul 3, 2024 | Jul 1, 2024 |
| Vmware Esxi | — | Upgrade VMware ESXi 8.0.3 to build number 24585383 | Apr 10, 2025 | Feb 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 1, 2024 |
| Vmware Vcenter | — | — | Apr 10, 2025 | Feb 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub