VDB
BDU%3A2024-04914
BDU%3A2024-04914
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость сервера средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NetApp Inc., Novell Inc., Сообщество свободного программного обеспечения, Siemens AG, Red Hat Inc., Canonical Ltd., Amazon.com Inc., FreeBSD Project, The NetBSD Project, OpenBSD Project, Moxa Inc., ООО «РусБИТех-Астра» | ONTAP Select Deploy, openSUSE Tumbleweed, Debian GNU/Linux, Industrial Edge Management OS (IEM-OS), Red Hat OpenShift Container Platform, Ubuntu, Red Hat Enterprise Linux, Amazon Linux, FreeBSD, SUSE Liberty Linux, ONTAP Tools for VMware vSphere, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Basesystem, OpenSUSE Leap, SUSE Linux Enterprise Module for Desktop Applications, Red Hat Enterprise Linux EUS, Red Hat Enterprise Linux Server Update Services for SAP Solutions, E-Series SANtricity OS Controller Software 11.x, NetBSD, OpenSSH, EDR-8010, EDR-G9010, OnCell G4302-LTE4, SINUMERIK ONE, SINEMA Remote Connect Server, Astra Linux Special Edition (запись в едином реестре российских программ №369) |
Timeline
- Jul 1, 2024 CVE Published
- Jul 3, 2024 PoC Published
- Apr 23, 2025 CVE Updated
- Mar 19, 2026 Distribution Patch
References
- https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041430.html url
- https://t.me/proxy_bar/2141 url
- https://www.opennet.ru/opennews/art.shtml?num=61470 url
- https://security-tracker.debian.org/tracker/CVE-2024-6387 url
- https://ubuntu.com/security/CVE-2024-6387 url
- https://ubuntu.com/security/notices/USN-6859-1 url
- https://access.redhat.com/security/cve/CVE-2024-6387 url
- https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt url
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD url
- https://content.kaspersky-labs.com/fm/site-editor/18/18b11446b26bf9d75192859778e9a9de/source/report-ir2024.pdf url
- https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc advisory
- https://www.suse.com/security/cve/CVE-2024-6387.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-446545.html advisory