CVE-2024-6387

unknowncovered by 1 sourcefirst seen 2024-07-01

On July 1, 2024, OpenSSH published a security advisory regarding the critical vulnerability CVE-2024-6387. This vulnerability allows an unauthenticated attacker to execute arbitrary code remotely with *root* privileges. The vendor specifies that versions 8.5p1 to 9.7p1 are...

CSIRTS triage

What: The vulnerability allows an unauthenticated attacker to execute arbitrary code remotely with root privileges.
Who is affected: All OpenSSH installations using versions 8.5p1 to 9.7p1.
Urgency: Remediation is urgent due to the critical nature of the vulnerability.
Action: Upgrade to a version outside the affected range.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2024-6387

Get an email if CVE-2024-6387 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploitation likely imminentEPSS puts this in the most-targeted tier (99.5% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all EPSS-scored CVEs.

Advisory coverage (1)

unknownVulnerability in OpenSSH (July 1, 2024)cert-fr-alerte · 2024-07-01

External references

NVD record for CVE-2024-6387

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-6387 status](https://www.csirts.com/badge/CVE-2024-6387)](https://www.csirts.com/cve/CVE-2024-6387)