Security Bulletin
This security bulletin contains one high risk vulnerability.
EUVDB-ID: #VU93513
Risk: High
CVSSv3.1: 7.3 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2024-6387
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to a race condition in portable version of sshd. A remote non-authenticated attacker can send a series of requests in order to trigger a race condition and execute arbitrary code on the system.
Update the affected package openssh to the latest version.
Vulnerable software versionsDesktop Applications Module: 15-SP6
Basesystem Module: 15-SP6
SUSE Linux Enterprise Real Time 15: SP6
openSUSE Leap: 15.6
SUSE Linux Enterprise Server for SAP Applications 15: SP6
SUSE Linux Enterprise Server 15: SP6
SUSE Linux Enterprise Desktop 15: SP6
openssh-cavs: before 9.6p1-150600.6.3.1
openssh-common: before 9.6p1-150600.6.3.1
openssh-server-debuginfo: before 9.6p1-150600.6.3.1
openssh-askpass-gnome-debuginfo: before 9.6p1-150600.6.3.1
openssh-cavs-debuginfo: before 9.6p1-150600.6.3.1
openssh-common-debuginfo: before 9.6p1-150600.6.3.1
openssh-server: before 9.6p1-150600.6.3.1
openssh-debugsource: before 9.6p1-150600.6.3.1
openssh-fips: before 9.6p1-150600.6.3.1
openssh-debuginfo: before 9.6p1-150600.6.3.1
openssh: before 9.6p1-150600.6.3.1
openssh-helpers: before 9.6p1-150600.6.3.1
openssh-clients: before 9.6p1-150600.6.3.1
openssh-server-config-disallow-rootlogin: before 9.6p1-150600.6.3.1
openssh-helpers-debuginfo: before 9.6p1-150600.6.3.1
openssh-askpass-gnome: before 9.6p1-150600.6.3.1
openssh-askpass-gnome-debugsource: before 9.6p1-150600.6.3.1
openssh-clients-debuginfo: before 9.6p1-150600.6.3.1
CPE2.3http://www.suse.com/support/update/announcement/2024/suse-su-20242275-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.