Skip to content
OpenAdvisories
Medium RLSA-2024:4457 1 CVE

Moderate: openssh security update

Published Jul 15, 2024 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Possible remote code execution due to a race condition in signal handling affecting Rocky Linux 9 (CVE-2024-6409)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 openssh 0:8.7p1-38.el9_4.4

Vulnerabilities 1

  • High 7.0
    CVE-2024-6409 EPSS 28%

    Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

    A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2295085