OpenSSH high-severity vulnerability (CVE-2024-6387)

Dear user,

Recently, relevant security organizations announced a high-risk vulnerability with wide impact, numbered CVE-2024-6387, which affects multiple versions of OpenSSH. The specific affected versions are as follows:

• OpenSSH < 4.4p1
• OpenSSH 8.5p1 <= version < 9.8p1

Vulnerability overview:

This vulnerability could allow an unauthorized remote attacker to exploit this vulnerability to execute malicious code, obtain sensitive information, or cause service interruption. This poses a serious threat to systems and servers that rely on OpenSSH for secure communication.

Solution:

We strongly recommend that all affected users take the following actions immediately:

1. Upgrade OpenSSH: Please upgrade OpenSSH to the latest secure version (9.8p1 or higher).

2. Monitoring system: Continue to monitor system logs and network traffic for signs of possible attacks.

Related detection commands:

ssh -V //View ssh version