Summary

CVE-2024-6387 is a regression of CVE-2006-5051 in OpenSSH's `sshd`, causing a race condition that mishandles signals. An unauthenticated attacker can exploit this by failing to authenticate within a set time. Users should update OpenSSH or set `LoginGraceTime` to zero.

Description