RHSA-2024:4312

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2024-6387
Published: 14 Sept 2024, 02:10
Last modified:28 May 2026, 10:03

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8.1 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Sept 2024, 02:10
Published
Vulnerability first disclosed
28 May 2026, 10:03
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: openssh security update

CVSS Metrics

  • v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • redhat•openssh

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-askpass

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-askpass-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-clients

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-clients-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-debugsource

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-keycat

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-keycat-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-server

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-server-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•openssh-sk-dummy-debuginfo

    < 0:8.7p1-38.el9_4.1 | < 0:8.7p1-38.el9_4.1

  • redhat•pam_ssh_agent_auth

    < 0:0.10.4-5.38.el9_4.1 | < 0:0.10.4-5.38.el9_4.1

  • redhat•pam_ssh_agent_auth-debuginfo

    < 0:0.10.4-5.38.el9_4.1 | < 0:0.10.4-5.38.el9_4.1

References (10)