CVE-2024-6387 Open SSH vulnerability in Security Analytics

Products

• Security Analytics
• Security Analytics - VA

Issue/Introduction

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). A race condition can lead to unsafe handling of some signals. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time.

Resolution

Security Analytics is not vulnerable per the list of "Known Affected Software Configurations"