Is CVE-2024-6387 being actively exploited?

CVE-2024-6387 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2024-6387?

CVE-2024-6387 has a CVSS 3.1 base score of 8.1 (HIGH).

CVE-2024-6387

HIGH · CVSS 8.1EPSS 99.5%EU EUVD

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Key facts

CVSS score: 8.1 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-364
EPSS score: 99.5% (100th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2024-47981)
Published: July 1, 2024
NVD last modified: October 15, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2024-47981 in the EU Vulnerability Database. Last updated in EUVD on October 15, 2026.

View on the EU Vulnerability Database

Affected products

almalinux / almalinux
amazon / amazon linux
apple / macos
arista / eos
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
freebsd / freebsd
netapp / 500f
netapp / 500f firmware
netapp / 8300
netapp / 8300 firmware
netapp / 8700
netapp / 8700 firmware
netapp / a150
netapp / a150 firmware
netapp / a1k
netapp / a1k firmware
netapp / a220

and 67 more…

Certified products that may be affected

28 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Amazon Linux 2023 GnuTLS Cryptographic Module - Amazon Web Services, Inc. - FIPS 140 5476 - active
Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5445 - active
Amazon Linux 2023 OpenSSL FIPS Provider - Amazon Web Services, Inc. - FIPS 140 5438 - active
Red Hat Enterprise Linux 9 libgcrypt - Red Hat, Inc. - FIPS 140 5366 - active
Amazon Linux 2023 Kernel Cryptographic API - Amazon Web Services, Inc. - FIPS 140 5369 - active

See all 28 in the Security Certifications Explorer.

References

http://seclists.org/fulldisclosure/2024/Jul/18(Mailing List)
http://seclists.org/fulldisclosure/2024/Jul/19(Mailing List)
http://seclists.org/fulldisclosure/2024/Jul/20(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/01/12(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/01/13(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/02/1(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/03/1(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/03/11(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/03/2(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/03/3(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2024/07/03/4(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/03/5(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/04/1(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/04/2(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/08/2(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/08/3(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/09/2(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/09/5(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/10/1(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/10/2(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/10/3(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/10/4(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/10/6(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/11/1(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/11/3(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/23/4(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/23/6(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/28/2(Mailing List)
http://www.openwall.com/lists/oss-security/2024/07/28/3(Mailing List)
https://access.redhat.com/errata/RHSA-2024:4312(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4340(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4389(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4469(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4474(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4479(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2024:4484(Third Party Advisory)
https://access.redhat.com/security/cve/CVE-2024-6387(Third Party Advisory)
https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/(Third Party Advisory)
https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/(Press/Media Coverage, Third Party Advisory)
https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server(Press/Media Coverage, Third Party Advisory)

Last updated October 15, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain