Jump to content

CVE-2024-6387: RegreSSHion vulnerability


Go to solution Solved by Werner,

Recommended Posts

Just found this:

 

source: https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

source: https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/

 

The vulnerability, which is a signal handler race condition in OpenSSH’s server (sshd), allows unauthenticated remote code execution (RCE) as root on glibc-based Linux systems; that presents a significant security risk. This race condition affects sshd in its default configuration.

 

Are we affected running Armbian ?

Link to comment
Share on other sites

  • Solution

Existing installations can simply be apt update/upgraded since both Ubuntu and Debian released fixed versions for their supported userspaces.

Armbians rootfs packages, which are used for building new images, have been recreated and pre-built images available for download are being rebuilt/replaced as well.

 

tl;dr: mitigation is in the works/already done

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...

Important Information

Terms of Use - Privacy Policy - Guidelines