#OpenSSH

On July 1, 2024, Qualys disclosed CVE-2024-6387, nicknamed regreSSHion, a signal-handler race condition in OpenSSH's sshd server that on glibc-based Linux could allow unauthenticated remote code execution as root. Here are the confirmed technical facts, affected versions, and remediation.