Login

News Post

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

ArstechnicaArstechnica · 3m
“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

Researchers have discovered a critical vulnerability in the OpenSSH networking utility that could allow attackers to gain complete control over Linux and Unix servers without the need for authentication. The vulnerability, known as CVE-2024-6387, enables remote code execution with root system rights on Linux systems that use glibc. This vulnerability, resulting from a regression introduced in 2020, could lead to system compromise, malware installation, data manipulation, and the creation of backdoors. While the severity of the threat is significant, factors such as the attack's time-consuming nature and limitations on OS versions make mass exploitation unlikely. However, targeted attacks may still be possible.

1
View Source

Comments

More Like this

Federal agency warns critical Linux vulnerability being actively exploited

Federal agency warns critical Linux vulnerability being actively exploited

Critical vulnerability affecting most Linux distros allows for bootkits

Critical vulnerability affecting most Linux distros allows for bootkits

Critical vulnerability affecting most Linux distros allows for bootkits

Critical vulnerability affecting most Linux distros allows for bootkits

Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

Maximum-severity GitLab flaw allowing account hijacking under active exploitation

Maximum-severity GitLab flaw allowing account hijacking under active exploitation

Cisco tells Secure Client users to patch immediately or risk VPN security flaw

Cisco tells Secure Client users to patch immediately or risk VPN security flaw

Linux maintainers were infected for 2 years by SSH-dwelling backdoor with massive reach

Linux maintainers were infected for 2 years by SSH-dwelling backdoor with massive reach

Stealthy Linux rootkit found in the wild after going undetected for 2 years

Stealthy Linux rootkit found in the wild after going undetected for 2 years

WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April

WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April

This commonly-used Ubuntu tool can be hijacked to spread malware

This commonly-used Ubuntu tool can be hijacked to spread malware

Download the medial app to read full posts, comements and news.