CVE catalog

CVE-2024-6387

OpenSSH vulnerability

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
99.51% · Oct 25, 2026

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensshsid1:10.6p1-1fixed
Debianopensshforky1:10.6p1-1fixed
Debianopensshtrixie1:10.0p1-7+deb13u4fixed
Debianopensshtrixie-security1:10.0p1-7+deb13u2fixed
Debianopensshbookworm1:9.2p1-2+deb12u10fixed
Debianopensshbookworm-security1:9.2p1-2+deb12u9fixed
Ubuntuopensshnoble1:9.2p1-2+deb12u3fixed
Ubuntuopensshnoble1:9.6p1-3ubuntu13.3fixed
Ubuntuopenssh-clientnoble1:9.6p1-3ubuntu13.3fixed
Ubuntuopenssh-servernoble1:9.6p1-3ubuntu13.3fixed
Ubuntuopenssh-sftp-servernoble1:9.6p1-3ubuntu13.3fixed
Ubuntuopenssh-testsnoble1:9.6p1-3ubuntu13.3fixed
Ubuntusshnoble1:9.6p1-3ubuntu13.3fixed
Ubuntussh-askpass-gnomenoble1:9.6p1-3ubuntu13.3fixed
Cpesma_6200_firmwareNot reportedNot reportedunknown
Cpesma_7200_firmwareNot reportedNot reportedunknown
CpeeosNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
CpealmalinuxNot reportedNot reportedunknown
Cpesma_6210_firmwareNot reportedNot reportedunknown
Cpesma_7210_firmwareNot reportedNot reportedunknown
Cpesma_8200v_firmwareNot reportedNot reportedunknown
Cpesra_ex_7000_firmwareNot reportedNot reportedunknown
Cpea1k_firmwareNot reportedNot reportedunknown
Cpea70_firmwareNot reportedNot reportedunknown
Cpea90_firmwareNot reportedNot reportedunknown
Cpea700s_firmwareNot reportedNot reportedunknown
Cpe8300_firmwareNot reportedNot reportedunknown
Cpe8700_firmwareNot reportedNot reportedunknown
Cpea400_firmwareNot reportedNot reportedunknown
Cpec400_firmwareNot reportedNot reportedunknown
Cpea250_firmwareNot reportedNot reportedunknown
Cpe500f_firmwareNot reportedNot reportedunknown
Alpineopenssh3.179.1_p1-r6fixed
Alpineopenssh3.189.3_p2-r2fixed
Alpineopenssh3.199.6_p1-r1fixed
Alpineopenssh3.209.7_p1-r4fixed
Alpineopenssh3.219.8_p1-r0fixed
Alpineopenssh3.229.8_p1-r0fixed
Alpineopenssh3.239.8_p1-r0fixed
Alpineopenssh3.249.8_p1-r0fixed
Ubuntuopenssh22.041:8.4p1-6ubuntu2vulnerable
Ubuntuopenssh22.041:8.7p1-2vulnerable
Ubuntuopenssh22.041:8.7p1-2build1vulnerable
Ubuntuopenssh22.041:8.7p1-4vulnerable
Ubuntuopenssh22.041:8.8p1-1vulnerable
Ubuntuopenssh22.041:8.9p1-3vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.1vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.3vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.4vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.5vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.6vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.7vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.10fixed
Ubuntuopenssh24.041:9.3p1-1ubuntu3vulnerable
Ubuntuopenssh24.041:9.4p1-1ubuntu1vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu1vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu2vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu11vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu12vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu13vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu13.3fixed
Opensuseopensshtumbleweed9.6p1-10.1fixed
Ubuntuopenssh22.041:8.4p1-6ubuntu2vulnerable
Ubuntuopenssh22.041:8.7p1-2vulnerable
Ubuntuopenssh22.041:8.7p1-2build1vulnerable
Ubuntuopenssh22.041:8.7p1-4vulnerable
Ubuntuopenssh22.041:8.8p1-1vulnerable
Ubuntuopenssh22.041:8.9p1-3vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.1vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.3vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.4vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.5vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.6vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.7vulnerable
Ubuntuopenssh22.041:8.9p1-3ubuntu0.10fixed
Ubuntuopenssh24.041:9.3p1-1ubuntu3vulnerable
Ubuntuopenssh24.041:9.4p1-1ubuntu1vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu1vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu2vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu11vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu12vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu13vulnerable
Ubuntuopenssh24.041:9.6p1-3ubuntu13.3fixed
Suseopensshlinux enterprise module for basesystem 15 sp69.6p1-150600.6.3.1fixed
Suseopenssh-askpass-gnomelinux enterprise module for desktop applications 15 sp69.6p1-150600.6.3.1fixed
Opensuseopensshleap 15.69.6p1-150600.6.3.1fixed
Opensuseopenssh-askpass-gnomeleap 15.69.6p1-150600.6.3.1fixed
Opensuseopensshleap 15.69.6p1-150600.6.3.1fixed
Opensuseopenssh-askpass-gnomeleap 15.69.6p1-150600.6.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensshsourcesid1:9.7p1-7not yet assignedNot reportedNot reported
Debianopensshsourceforky1:9.7p1-7not yet assignedNot reportedNot reported
Debianopensshsourcetrixie1:9.7p1-7not yet assignedNot reportedNot reported
Debianopensshsourcebookworm1:9.2p1-2+deb12u3not yet assignedNot reportedNot reported
Ubuntuopensshdebnoble1:9.2p1-2+deb12u3Not reportedNot reportedNot reported
Ubuntuopensshdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntuopenssh-clientdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntuopenssh-serverdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntuopenssh-sftp-serverdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntuopenssh-testsdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntusshdebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Ubuntussh-askpass-gnomedebnoble1:9.6p1-3ubuntu13.3Not reportedNot reportedNot reported
Alpineopensshapk3.179.1_p1-r6Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.189.3_p2-r2Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.199.6_p1-r1Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.209.7_p1-r4Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.219.8_p1-r0Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.229.8_p1-r0Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.239.8_p1-r0Not reportedALPINE-CVE-2024-6387Not reported
Alpineopensshapk3.249.8_p1-r0Not reportedALPINE-CVE-2024-6387Not reported
Ubuntuopensshdeb22.041:8.9p1-3ubuntu0.10Not reportedUSN-6859-1Not reported
Ubuntuopensshdeb24.041:9.6p1-3ubuntu13.3Not reportedUSN-6859-1Not reported
Opensuseopensshrpmtumbleweed9.6p1-10.1Not reportedOPENSUSE-SU-2024:14088-1Not reported
Ubuntuopensshdeb22.041:8.9p1-3ubuntu0.10Not reportedUBUNTU-CVE-2024-6387Not reported
Ubuntuopensshdeb24.041:9.6p1-3ubuntu13.3Not reportedUBUNTU-CVE-2024-6387Not reported
Suseopensshrpmlinux enterprise module for basesystem 15 sp69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise module for desktop applications 15 sp69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-1Not reported
Opensuseopensshrpmleap 15.69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-1Not reported
Opensuseopenssh-askpass-gnomerpmleap 15.69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-1Not reported
Opensuseopensshrpmleap 15.69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-2Not reported
Opensuseopenssh-askpass-gnomerpmleap 15.69.6p1-150600.6.3.1Not reportedSUSE-SU-2024:2275-2Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • Source package: [openssh]

    Details (2)
    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • Source package: [openssh]

    Details (2)
    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • [openssh-tests]Unknown

    Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • [ssh]Unknown

    Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · all · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · all · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

  • Source package: [openssh]

    Details (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:9.2p1-2+deb12u3

      usn · openssh · debian · bookworm; usn · openssh · debian · 12

[openSUSE Tumbleweed]

  • [openssh]Unknown

    Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 9.6p1-10.1

      usn · openssh · opensuse · tumbleweed

  • [openssh-cavs]Unknown

    Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

  • Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

  • Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

  • Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

  • Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

  • Source package: [openssh]

    Details (1)
    • 10.5p1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 9.6p1-10.1

      Version impact unknown

      usn · openssh · opensuse · tumbleweed

Observed:

References