CVE-2024-6409

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-6409
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6409.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-6409
Downstream
BELL (1)
CLSA (1)
OESA (3)
RHSA (3)
RLSA (1)
Related
Published
2024-07-08T17:57:10Z
Modified
2026-10-21T02:51:54Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
Summary
Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
Details

A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). As a consequence of a successful attack, in the worst case scenario, an attacker may be able to perform a remote code execution (RCE) as an unprivileged user running the sshd server.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-364"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6409.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:8.7p1-38.el9_4.4"
                        },
                        {
                            "fixed":  "0:8.7p1-38.el9_4.4"
                        },
                        {
                            "fixed":  "0:8.7p1-12.el9_0.3"
                        },
                        {
                            "fixed":  "0:8.7p1-30.el9_2.7"
                        },
                        {
                            "fixed":  "413.92.202408122222-0"
                        },
                        {
                            "fixed":  "414.92.202407300859-0"
                        },
                        {
                            "fixed":  "415.92.202407301159-0"
                        },
                        {
                            "fixed":  "416.94.202407171205-0"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/openela-main/openssh

Affected ranges

Type
GIT
Repo
https://github.com/openela-main/openssh
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c00da7741d42029e49047dd89e266d91dcfbffa0
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "c00da7741d42029e49047dd89e266d91dcfbffa0"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

imports/el9/openssh-8.*
imports/el9/openssh-8.7p1-30.el9_2
imports/el9/openssh-8.7p1-34.el9
imports/el9/openssh-8.7p1-34.el9_3.3
imports/el9/openssh-8.7p1-38.el9
imports/el9/openssh-8.7p1-38.el9_4.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6409.json"