CVE-2024-6387

Vendorcanonical, almalinux, arista, netapp, sonicwallProductubuntu linux, almalinux, eos, a700s firmware, a800 firmware, c190 firmware, 8300 firmware, 8700 firmware, a400 firmware, a250 firmware, 500f firmware, sma 6200 firmware, sma 6210 firmware, sma 7200 firmware, sma 7210 firmware, c400 firmware, a1k firmware, a70 firmware, a900 firmware, a90 firmware, c800 firmware, c250 firmware, a9500 firmware, sma 8200v firmware, sra ex 7000 firmwareDiscoveredJul 1, 2024UpdatedSep 1, 2026

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

View graph Watch Export

CVSS v3.1

8.1 HIGH

EPSS

99.5%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Connections

29 relationships

Timeline

disclosure → media coverage

Jul 1, 2024

Disclosure — published as a CVE record. · last revised by NVD Sep 1, 2026

Dec 23, 2025

securelist.com reports: From cheats to exploits: Webrat spreading via GitHub

Dec 23, 2025

helpnetsecurity.com reports: Budding infosec pros and aspiring cyber crooks targeted with fake PoC exploits

Public PoC (10)

github.com/7etsuo/cve-2024-6387-poc github.com/zgzhang/cve-2024-6387-poc github.com/acrono/cve-2024-6387-poc github.com/lflare/cve-2024-6387-poc github.com/getdrive/CVE-2024-6387-PoC github.com/FerasAlrimali/CVE-2024-6387-POC github.com/passwa11/cve-2024-6387-poc github.com/jack0we/CVE-2024-6387 github.com/xaitax/CVE-2024-6387_Check github.com/bigb0x/CVE-2024-6387

Unverified third-party code — review before executing.