High Threat Security Alert (A24-07-02): Vulnerability in OpenSSH

Description:

OpenSSH has released a new version to address a vulnerability in various versions of OpenSSH. The details of the security update can be found at:
https://www.openssh.com/txt/release-9.8

Reports indicate that the proof-of-concept (PoC) for the vulnerability (CVE-2024-6387) in OpenSSH is publicly available. In addition, a remote code execution vulnerability (CVE-2024-6409) was discovered. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• OpenSSH versions between 8.5p1 and 9.7p1 (inclusive)
• OpenSSH versions prior to 4.4p1, unless they are patched for CVE-2006-5051 and CVE-2008-4109
• OpenSSH versions 8.7p1 and 8.8p1 shipped with Rat Hat Enterprise Linux 9

Impact:

Successful exploitation of the vulnerability could lead to remote code execution on an affected system.

Recommendation:

Software update for affected systems is now available. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.openssh.com/txt/release-9.8
• https://www.hkcert.org/security-bulletin/openssh-remote-code-execution-vulnerability_20240702
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6409