RegreSSHion
| CVE identifier(s) | CVE-2024-6387 |
|---|---|
| Date discovered | 1 July 2024 |
| Date patched | 1 July 2024 |
| Discoverer | Qualys Threat Research Unit (TRU) |
| Affected software | OpenSSH (8.5p1–9.7p1) |
RegreSSHion is a family of security bug in the OpenSSH software, which was disclosed on 1 July 2024. RegreSSHion could enable an remote attacker to cause OpenSSH to execute arbitrary code.[1][2] No less than 14 million servers are potentially vulnerable.[3]
- ^ https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server
- ^ https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/
- ^ https://thehackernews.com/2024/07/new-openssh-vulnerability-could-lead-to.html