Loading...
Market
Story
Qualys Discovers Critical OpenSSH RCE Vulnerability CVE-2024-6409 in RHEL 9
Jul 9, 2024, 03:32 PM
A significant vulnerability has been discovered in OpenSSH, a widely used secure communications protocol. Researchers at the cybersecurity firm Qualys identified the flaw, which is designated as CVE-2024-6409. The vulnerability, found in RHEL 9's versions 8.7p1 and 8.8p1, and unmaintained Fedora, allows for remote code execution (RCE) via a race condition in the privileged separation (privsep) child process. This issue has sparked considerable concern within the security community, especially since active exploits have already been detected. The flaw is distinct from another recent vulnerability, CVE-2024-6387, but shares some similarities.
View original story
Similar markets
Phishing • 25%
Direct network attack • 25%
Malware installation • 25%
Other • 25%
Bypassing user consent • 25%
Terminal redirection • 25%
Gatekeeper bypass • 25%
Other method • 25%
Remote Code Execution • 25%
Data Exfiltration • 25%
Denial of Service • 25%
Privilege Escalation • 25%
Yes • 50%
No • 50%
Ransomware • 25%
Data theft • 25%
Denial of Service • 25%
Other • 25%
Kernel Rootkit • 25%
SSDT Hook • 25%
Infinityhook • 25%
Other • 25%
Phishing emails • 25%
Malware • 25%
Social engineering • 25%
Other • 25%
Financial • 25%
Healthcare • 25%
Government • 25%
Other • 25%
Phishing • 25%
RDP exploits • 25%
RMM tools • 25%
Other • 25%
Nearest Neighbor Attack • 25%
Phishing • 25%
Malware • 25%
Other • 25%