CVE-2024-6387

HIGH 97 PoCs

ACT NOW Priority: 8.06 BB Relevance: 86/100

Published: 2024-07-01 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Network No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network

AC: High

PR: None

UI: None

S: Unchanged

C: High

I: High

A: High

Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Weakness Classification (2)

CWE-362 CWE-364 — Signal Handler Race Condition

Affected Software (90)

Vendor	Product	Version
—	—	8.5p1
almalinux	almalinux	9.0
amazon	amazon_linux	2023.0
apple	macos	12.0 – 12.7.6
arista	eos	4.32.0 – 4.32.1f
canonical	ubuntu_linux	23.10
canonical	ubuntu_linux	24.04
canonical	ubuntu_linux	22.04
canonical	ubuntu_linux	22.10
canonical	ubuntu_linux	23.04
debian	debian_linux	12.0
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.2
freebsd	freebsd	13.3
freebsd	freebsd	13.3
freebsd	freebsd	13.3
freebsd	freebsd	13.3
freebsd	freebsd	14.0
freebsd	freebsd	14.0
freebsd	freebsd	14.0

Showing 30 of 90 entries

References & Advisories (81)

https://access.redhat.com/errata/RHSA-2024:4312

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4340

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4389

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4469

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4474

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4479

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/errata/RHSA-2024:4484

vendor-advisory x_refsource_REDHAT

https://access.redhat.com/security/cve/CVE-2024-6387

vdb-entry x_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=2294604

issue-tracking x_refsource_REDHAT

https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/

Third Party Advisory

https://explore.alas.aws.amazon.com/CVE-2024-6387.html

Third Party Advisory

https://github.com/zgzhang/cve-2024-6387-poc

Third Party Advisory

https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/thread/23BF5BMGFVEVUI2WNVAGMLKT557EU7VY/

Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010

Third Party Advisory

https://security-tracker.debian.org/tracker/CVE-2024-6387

Third Party Advisory

https://security.netapp.com/advisory/ntap-20240701-0001/

Third Party Advisory

https://sig-security.rocky.page/issues/CVE-2024-6387/

Third Party Advisory

https://support.apple.com/kb/HT214118

Third Party Advisory

https://support.apple.com/kb/HT214119

Third Party Advisory

https://support.apple.com/kb/HT214120

Third Party Advisory

https://ubuntu.com/security/CVE-2024-6387

Third Party Advisory

https://ubuntu.com/security/notices/USN-6859-1

Third Party Advisory

https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do

Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100

Third Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc

Third Party Advisory

Showing 25 of 81 references

Proof of Concept (97)

★ 527

https://github.com/xaitax/CVE-2024-6387_Check

nomi-sec

★ 497

https://github.com/zgzhang/cve-2024-6387-poc

nomi-sec

★ 375

https://github.com/acrono/cve-2024-6387-poc

nomi-sec

★ 200

https://github.com/Karmakstylez/CVE-2024-6387

nomi-sec

★ 129

https://github.com/lflare/cve-2024-6387-poc

nomi-sec

★ 114

https://github.com/l0n3m4n/CVE-2024-6387

nomi-sec

★ 103

https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker

nomi-sec

★ 71

https://github.com/xonoxitron/regreSSHion

nomi-sec

★ 53

https://github.com/d0rb/CVE-2024-6387

nomi-sec

★ 35

https://github.com/bigb0x/CVE-2024-6387

nomi-sec

★ 24

https://github.com/getdrive/CVE-2024-6387-PoC

nomi-sec

★ 21

https://github.com/sxlmnwb/CVE-2024-6387

nomi-sec

★ 17

https://github.com/YassDEV221608/CVE-2024-6387_PoC

nomi-sec

★ 15

https://github.com/TAM-K592/CVE-2024-6387

nomi-sec

★ 14

https://github.com/devarshishimpi/CVE-2024-6387-Check

nomi-sec

★ 13

https://github.com/thegenetic/CVE-2024-6387-exploit

nomi-sec

★ 12

https://github.com/l-urk/CVE-2024-6387

nomi-sec

★ 10

https://github.com/AiGptCode/ssh_exploiter_CVE-2024-6387

nomi-sec

★ 10

https://github.com/xonoxitron/regreSSHion-checker

nomi-sec

★ 10

https://github.com/0x4D31/cve-2024-6387_hassh

nomi-sec

★ 9

https://github.com/P4x1s/CVE-2024-6387

nomi-sec

★ 6

https://github.com/wiggels/regresshion-check

nomi-sec

★ 4

https://github.com/paradessia/CVE-2024-6387-nmap

nomi-sec

★ 4

https://github.com/MrR0b0t19/CVE-2024-6387-Exploit-POC

nomi-sec

★ 4

https://github.com/th3gokul/CVE-2024-6387

nomi-sec

★ 4

https://github.com/harshinsecurity/sentinelssh

nomi-sec

★ 4

https://github.com/lala-amber/CVE-2024-6387

nomi-sec

★ 4

https://github.com/kinu404/CVE-2024-6387

nomi-sec

★ 3

https://github.com/PrincipalAnthony/CVE-2024-6387-Updated-x64bit

nomi-sec

★ 3

https://github.com/RickGeex/CVE-2024-6387-Checker

nomi-sec

★ 3

https://github.com/BrandonLynch2402/cve-2024-6387-nuclei-template

nomi-sec

★ 3

https://github.com/Symbolexe/CVE-2024-6387

nomi-sec

★ 3

https://github.com/Ap0dexMe0/CVE-2024-6387

nomi-sec

★ 3

https://github.com/awusan125/test_for6387

nomi-sec

★ 3

https://github.com/m0n3ef/regreSSHion-Checker

nomi-sec

★ 2

https://github.com/betancour/OpenSSH-Vulnerability-test

nomi-sec

★ 2

https://github.com/muyuanlove/CVE-2024-6387fixshell

nomi-sec

★ 2

https://github.com/ahlfors/CVE-2024-6387

nomi-sec

★ 2

https://github.com/ACHUX21/checker-CVE-2024-6387

nomi-sec

★ 2

https://github.com/grupooruss/CVE-2024-6387

nomi-sec

★ 2

https://github.com/prelearn-code/CVE-2024-6387

nomi-sec

★ 2

https://github.com/identity-threat-labs/CVE-2024-6387-Vulnerability-Checker

nomi-sec

★ 2

https://github.com/anhvutuan/CVE-2024-6387-poc-1

nomi-sec

★ 2

https://github.com/OHHDamnBRO/Noregressh

nomi-sec

★ 2

https://github.com/oseasfr/Scanner_CVE_OpenSSH

nomi-sec

★ 1

https://github.com/7etsuo/cve-2024-6387-poc

nomi-sec

★ 1

https://github.com/passwa11/cve-2024-6387-poc

nomi-sec

★ 1

https://github.com/teamos-hub/regreSSHion

nomi-sec

★ 1

https://github.com/R4Tw1z/CVE-2024-6387

nomi-sec

★ 1

https://github.com/shamo0/CVE-2024-6387_PoC

nomi-sec

★ 1

https://github.com/rumochnaya/openssh-cve-2024-6387.sh

nomi-sec

★ 1

https://github.com/xristos8574/regreSSHion-nmap-scanner

nomi-sec

★ 1

https://github.com/n1cks0n/Test_CVE-2024-6387

nomi-sec

★ 1

https://github.com/turbobit/CVE-2024-6387-OpenSSH-Vulnerability-Checker

nomi-sec

★ 1

https://github.com/sardine-web/CVE-2024-6387-template

nomi-sec

★ 1

https://github.com/redux-sibi-jose/mitigate_ssh

nomi-sec

★ 1

https://github.com/alex14324/ssh_poc2024

nomi-sec

★ 1

https://github.com/X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker

nomi-sec

★ 1

https://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387

nomi-sec

★ 1

https://github.com/xiw1ll/CVE-2024-6387_Checker

nomi-sec

—

https://github.com/FerasAlrimali/CVE-2024-6387-POC

nomi-sec

—

https://github.com/jack0we/CVE-2024-6387

nomi-sec

—

https://github.com/Mufti22/CVE-2024-6387-checkher

nomi-sec

—

https://github.com/CiderAndWhisky/regression-scanner

nomi-sec

—

https://github.com/daniel-odrinski/CVE-2024-6387-Mitigation-Ansible-Playbook

nomi-sec

—

https://github.com/zenzue/CVE-2024-6387-Mitigation

nomi-sec

—

https://github.com/hssmo/cve-2024-6387_AImade

nomi-sec

—

https://github.com/particle99/CVE-2024-6387-POC

nomi-sec

—

https://github.com/no-one-sec/CVE-2024-6387

nomi-sec

—

https://github.com/dawnl3ss/CVE-2024-6387

nomi-sec

—

https://github.com/edsonjt81/CVE-2024-6387_Check

nomi-sec

—

https://github.com/CognisysGroup/CVE-2024-6387-Checker

nomi-sec

—

https://github.com/t3rry327/cve-2024-6387-poc

nomi-sec

—

https://github.com/jocker2410/CVE-2024-6387_poc

nomi-sec

—

https://github.com/sms2056/CVE-2024-6387

nomi-sec

—

https://github.com/invaderslabs/regreSSHion-CVE-2024-6387-

nomi-sec

—

https://github.com/4lxprime/regreSSHive

nomi-sec

—

https://github.com/sardine-web/CVE-2024-6387_Check

nomi-sec

—

https://github.com/imv7/CVE-2024-6387

nomi-sec

—

https://github.com/vkaushik-chef/regreSSHion

nomi-sec

—

https://github.com/dgourillon/mitigate-CVE-2024-6387

nomi-sec

—

https://github.com/mrmtwoj/CVE-2024-6387

nomi-sec

—

https://github.com/kubota/CVE-2024-6387-Vulnerability-Checker

nomi-sec

—

https://github.com/DimaMend/cve-2024-6387-poc

nomi-sec

—

https://github.com/dream434/CVE-2024-6387

nomi-sec

—

https://github.com/s1d6point7bugcrowd/CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH

nomi-sec

—

https://github.com/almogopp/OpenSSH-CVE-2024-6387-Fix

nomi-sec

—

https://github.com/YassDEV221608/CVE-2024-6387

nomi-sec

—

https://github.com/moften/regreSSHion-CVE-2024-6387

nomi-sec

—

https://github.com/Doux-x/CVE-2024-6387-analysis

nomi-sec

—

https://github.com/kaleth4/CVE-2024-6387

nomi-sec

—

https://github.com/vuducmanhno100-cloud/CVE-2024-6387

nomi-sec

—

https://github.com/al7araziruby-jpg/CVE-2024-6387-OpenSSH-Analysis

nomi-sec

—

https://github.com/hasan8babiker/CVE-2024-6387

nomi-sec

—

https://github.com/dolapoojone/CVE-2024-6387-Vulnerability-Anaysis

nomi-sec

—

https://github.com/ohackercego/CVE-2024-6387-how-to-fix

nomi-sec

—

https://github.com/axisops/CVE-2024-6387

nomi-sec

Bug Bounty Relevance

86 / 100

✓ Network accessible
✓ No authentication
✓ No user interaction
✓ PoC available (97)
✓ High exploitation probability

CVSS Score

8.1 / 10.0 v3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

99.51%

Raw Score 0.995060

Percentile 99.9%

Date 2026-11-08

EPSS Trend

2026-11-08

0.99506

2026-11-07

0.99506

2026-11-06

0.99506

Intelligence Sources

mitre ref →

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev