SSH: OpenSSH Race Condition in Signal Handler Remote Code Execution

This signature detects attempts to exploit a known vulnerability against OpenSSH. A successful attack can lead to arbitrary code execution.

Extended Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Affected Products

Debian debian_linux

References

CVE: CVE-2024-6387

URL: https://www.openwall.com/lists/oss-security/2024/07/01/3

Short Name

SSH:OPENSSH:RACE-SIGNAL-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

SSH: OpenSSH Race Condition in Signal Handler Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?