CVE-2024-6387
Openssh: regresshion - race condition in ssh allows rce/dos
- Published
- Jul 1, 2024
- Updated
- Sep 1, 2026
- Assigning CNA
- redhat
- Evidence observed
- Apr 22, 2025
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 99.9%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Sources
70- regreSSHiveExploit
rewrited SSH Exploit for CVE-2024-6387 (regreSSHion)
- cve-2024-6387-pocExploit
a signal handler race condition in OpenSSH's server (sshd)
- checker-CVE-2024-6387Scanner
Python scanner that checks hosts for the OpenSSH regreSSHion vulnerability (CVE-2024-6387)
- cve-2024-6387-pocExploit
32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc
- CVE-2024-6387Scanner
One-line bash script to check if a server is vulnerable to CVE-2024-6387, using curl to fetch and execute a remote check script.
- CVE-2024-6387-OpenSSH-AnalysisInformational
Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.
A Bash script to mitigate the CVE-2024-6387 vulnerability in OpenSSH by providing an option to upgrade to a secure version or apply a temporary workaround. This repository helps secure systems against potential remote code execution risks associated with affected OpenSSH versions.
- CVE-2024-6387-poc-1Scanner
CVE-2024-6387, also known as RegreSSHion, is a high-severity vulnerability found in OpenSSH servers (sshd) running on glibc-based Linux systems. It is a regression of a previously fixed vulnerability (CVE-2006-5051), which means the issue was reintroduced in newer versions of OpenSSH.
- CVE-2024-6387Scanner
OpenSSH RCE Massive Vulnerable Scanner
- CVE-2024-6387Exploit
Multithreaded Python exploit for OpenSSH CVE-2024-6387 RCE vulnerability, leveraging a signal handler race condition to achieve root access on target systems.
Proof-of-concept exploit for CVE-2024-6387, a signal handler race condition in OpenSSH's sshd server, enabling remote code execution.
- CVE-2024-6387-analysisResearch
CVE-2024-6387 OpenSSH 信号竞争漏洞（regreSSHion）分析报告及检测脚本
This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.
- Article-RegreSSHion-CVE-2024-6387Informational
Technical analysis and documentation of CVE-2024-6387, a critical remote code execution vulnerability in OpenSSH, detailing exploitation vectors and mitigation strategies for system administrators.
This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.
Proof-of-concept exploit for CVE-2024-6387, a signal handler race condition in OpenSSH server (sshd) on glibc-based Linux systems, enabling remote code execution as root.
- CVE-2024-6387Exploit
Exploit and scanner for CVE-2024-6387 (regreSSHion) in OpenSSH. Includes detection, RCE exploitation, and shellcode generation for authorized penetration testing and lab environments.
- CVE-2024-6387Exploit
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
Proof-of-concept exploit for CVE-2024-6387 targeting glibc address manipulation to achieve remote code execution.
- CVE-2024-6387Exploit
PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)
- CVE-2024-6387Exploit
Python-based proof-of-concept exploit for CVE-2024-6387 (OpenSSH regreSSHion) targeting glibc-based 32-bit Linux systems via heap manipulation and race condition.
MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc
- CVE-2024-6387Exploit
Proof of concept python script for regreSSHion exploit.
- CVE-2024-6387Scanner
regreSSHion is a security tool designed to test for vulnerabilities related to CVE-2024-6387, specifically focusing on SSH and remote access exploitation.
- CVE-2024-6387-Exploit-POCExploit
Proof-of-concept exploit for CVE-2024-6387 targeting vulnerable OpenSSH servers via heap manipulation and race condition to achieve remote code execution.
- CVE-2024-6387-checkherScanner
Lightweight Python script to check systems for CVE-2024-6387 vulnerability, enabling rapid identification of affected hosts for remediation.
Automated bash script to patch CVE-2024-6387 by compiling and installing OpenSSH 9.8p1 from source on Debian/Ubuntu systems.
- Test_CVE-2024-6387Scanner
Test_CVE-2024-6387 is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH
- CVE-2024-6387-nmapScanner
CVE-2024-6387-nmap
- CVE-2024-6387-POCExploit
fork for proof of concept of the regresshion vulnerability
- CVE-2024-6387Exploit
Proof-of-concept exploit for CVE-2024-6387 (regreSSHion) targeting unauthenticated remote code execution in OpenSSH server via signal handler race condition. Includes scanning, exploitation, and reverse shell generation.
- CVE-2024-6387-Updated-x64bitExploit
Private x64 RCE exploit for CVE-2024-6387 [02.07.2024] from exploit.in
Technical analysis and proof-of-concept for CVE-2024-6387, a race condition in OpenSSH signal handling enabling unauthenticated remote code execution as root on glibc-based Linux systems.
- CVE-2024-6387-templateScanner
Quick regreSSHion checker (based on software version) for nuclei CVE-2024-6387
- CVE-2024-6387_PoCScanner
Script for checking CVE-2024-6387 (regreSSHion)
- CVE-2024-6387Scanner
SSH banner-based vulnerability scanner for CVE-2024-6387 detection with multithreaded scanning, progress bar, and color-coded output for rapid network assessment.
- CVE-2024-6387Exploit
Targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems.
- CVE-2024-6387Exploit
SSH Exploit for CVE-2024-6387 : RCE in OpenSSH's server, on glibc-based Linux systems
- cve-2024-6387-pocExploit
Exploit for CVE-2024-6387 targeting a signal handler race condition in OpenSSH sshd on glibc-based Linux systems, enabling remote code execution as root.
- regreSSHionPoC
This is a POC I wrote for CVE-2024-6387
- CVE-2024-6387Scanner
CVE-2024-6387 : Vulnerability Detection tool for regreSSHion Remote Unauthenticated Code Execution in OpenSSH Server
- CVE-2024-6387Exploit
CVE-2024-6387 POC (Currently being edited)
- regreSSHionExploit
CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.
- CVE-2024-6387Exploit
Python exploit for CVE-2024-6387 (OpenSSH signal handler race condition) targeting glibc-based 32-bit Linux systems, with multi-threaded concurrency and heap grooming to achieve remote code execution.
- CVE-2024-6387_PoCExploit
Scans and exploits CVE-2024-6387 (regreSSHion) in OpenSSH servers. Features multi-threaded scanning, banner retrieval, grace time detection, and exploit mode with reverse shell payload.
a signal handler race condition in OpenSSH's server (sshd)
- cve-2024-6387_hasshDetection
HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).
- ssh_exploiter_CVE-2024-6387Exploit
CVE-2024-6387 with auto ip scanner and auto expliot
- ssh_poc2024Exploit
An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server
- test_for6387PoC
test code for cve-2024-6387
Nuclei template to detect OpenSSH servers vulnerable to CVE-2024-6387 (regreSSHion) by checking software version.
- regression-scannerScanner
Used to detect ssh servers vulnerable to CVE-2024-6387. Shameless robbery from https://github.com/bigb0x/CVE-2024-6387 using ChatGPT to translate the code to PHP.
- cve-2024-6387-pocExploit
Exploit for CVE-2024-6387, a signal handler race condition in OpenSSH sshd, enabling remote code execution as root on glibc-based Linux systems.
Proof-of-concept exploit script for CVE-2024-6387, a critical unauthenticated remote code execution vulnerability in OpenSSH. Designed for security testing and educational verification.
SSHd cve-2024-6387-poc
Proof-of-concept remote code execution exploit for CVE-2024-6387 in OpenSSH, demonstrating the vulnerability with a minimal C implementation.
- CVE-2024-6387_CheckExploit
RCE OpenSSH CVE-2024-6387 Check and Exploit
PoC exploit for CVE-2024-6387 (OpenSSH regreSSHion), targeting sshd signal handler race condition for remote code execution on glibc Linux systems.
Python script to test CVE-2024-6387 OpenSSH race condition vulnerability, enabling remote code execution on glibc-based Linux systems for security research and educational purposes.
Proof-of-concept exploit for CVE-2024-6387, a remote code execution vulnerability. Provides a targeted exploitation tool for security testing and vulnerability verification.
Proof-of-concept exploit for CVE-2024-6387, a remote code execution vulnerability in OpenSSH server, demonstrating exploitation techniques for security research.
- regreSSHion-CVE-2024-6387Exploit
CVE-2024-6387
- CVE-2024-6387Exploit
开箱即用的AK47
- NoregresshExploit
CVE-2024-6387 and more Checker and Exploiter - Reverse/Bind-Shell Support. education only
SSH RCE PoC CVE-2024-6387
Proof-of-concept exploit for CVE-2024-6387, a signal handler race condition in OpenSSH's sshd, enabling remote code execution on vulnerable servers.
- openssh-cve-2024-6387.shExploit
openssh-cve-2024-6387.sh
- CVE-2024-6387-exploitScanner
CVE-2024-6387 exploit
- CVE-2024-6387_CheckerDetection
Nuclei template to detect CVE-2024-6387. All latest patched versions are excluded.
Milad karimi · linux · Apr 22, 2025
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.