sxlmnwb/cve-2024-6387Targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems.
a signal handler race condition in OpenSSH's server (sshd)
An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.
$ make all
$ ./exp <ip> <port>
The exploit targets the SIGALRM handler race condition in OpenSSH's sshd:
SIGALRM handler calling async-signal-unsafe functions.