Summary
It was discovered that OpenSSH incorrectly handled signal management. A
remote attacker could use this issue to bypass authentication and remotely
access systems without proper credentials.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | openssh | 1:8.9p1-3ubuntu0.10 |
| Ubuntu · 24.04 LTS 24.04:LTS | openssh | 1:9.6p1-3ubuntu13.3 |
Vulnerabilities 1
-
High 8.1
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…
References
-
report
https://ubuntu.com/security/CVE-2024-6387