Skip to content

Cisco Affected by OpenSSH Vulnerability - 20240709001

Overview

The WA SOC has been made aware of a security vulnerability detected in OpenSSH's server (sshd). The vulnerability contains a race condition which can lead to sshd to handle certain signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

What is vulnerable?

Products Affected CVE CVSS Severity
Red Hat Enterprise Linux 9 CVE-2024-6387 8.1 High

What has been observed?

There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month... (refer Patch Management):

Additional References