RegreSSHion is a family of security bug in the OpenSSH software, which was disclosed on 1 July 2024. RegreSSHion could enable an remote attacker to cause OpenSSH to execute arbitrary code.[1][2] No less than 14 million servers are potentially vulnerable.[3]

RegreSSHion
CVE identifier(s)CVE-2024-6387
Date discovered1 July 2024; 7 days ago (2024-07-01)
Date patched1 July 2024; 7 days ago (2024-07-01)
DiscovererQualys Threat Research Unit (TRU)
Affected softwareOpenSSH (8.5p1–9.7p1)

References

edit