Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2024-6387

high

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

Vendor / product: Sonicwall — sma 6200 firmware

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

CVSS
8.1
8.1 (CVSS v3.1)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-07-01 13:15
Modified: 2026-11-06 21:17
NVD status: Modified
Last synced 5 days ago
Verified against the source API 2026-11-06 21:38 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

sonicwall / sma_6200_firmware all versions
sonicwall / sma_7200_firmware all versions
arista / eos ≥4.32.0 ≤4.32.1f
canonical / ubuntu_linux 23.10, 24.04, 22.04, 22.10, 23.04
almalinux / almalinux 9.0
sonicwall / sma_6210_firmware all versions
sonicwall / sma_7210_firmware all versions
sonicwall / sma_8200v_firmware all versions
sonicwall / sra_ex_7000_firmware all versions
netapp / a1k_firmware all versions
netapp / a70_firmware all versions
netapp / a90_firmware all versions
netapp / a700s_firmware all versions
netapp / 8300_firmware all versions
netapp / 8700_firmware all versions
netapp / a400_firmware all versions
netapp / c400_firmware all versions
netapp / a250_firmware all versions
netapp / 500f_firmware all versions
netapp / c250_firmware all versions
netapp / a800_firmware all versions
netapp / c800_firmware all versions
netapp / a900_firmware all versions
netapp / a9500_firmware all versions
netapp / c190_firmware all versions
netapp / a150_firmware all versions
netapp / a220_firmware all versions
netapp / fas2720_firmware all versions
netapp / fas2750_firmware all versions
netapp / fas2820_firmware all versions
netapp / bootstrap_os all versions
apple / macos ≥12.0 <12.7.6, ≥13.0 <13.6.8, ≥14.0 <14.6
openbsd / openssh <4.4, ≥8.6 ≤9.8, 4.4, 8.5, 8.6
redhat / openshift_container_platform 4.0
redhat / enterprise_linux 9.0
redhat / enterprise_linux_eus 9.4
redhat / enterprise_linux_for_arm_64 9.0_aarch64
redhat / enterprise_linux_for_arm_64_eus 9.4_aarch64
redhat / enterprise_linux_for_ibm_z_systems 9.0_s390x
redhat / enterprise_linux_for_ibm_z_systems_eus 9.4_s390x
redhat / enterprise_linux_for_power_little_endian 9.0_ppc64le
redhat / enterprise_linux_for_power_little_endian_eus 9.4_ppc64le
redhat / enterprise_linux_server_aus 9.4
suse / linux_enterprise_micro 6.0
debian / debian_linux 12.0
amazon / amazon_linux 2023.0
netapp / active_iq_unified_manager all versions
netapp / e-series_santricity_os_controller ≥11.0.0 ≤11.70.2
netapp / ontap 9
netapp / ontap_select_deploy_administration_utility all versions

Weakness classification (CWE)

CWE-364 CWE-362

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: http://www.openwall.com/lists/oss-security/2024/07/03/3
Patch / mitigation: https://github.com/openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09
Patch / mitigation: https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041431.html
Patch / mitigation: https://news.ycombinator.com/item?id=40843778

References

Data sources

NVD CVE API 2.0 — fetched 2026-11-06 21:38 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs

CVE-2026-19868CVE-2026-3439CVE-2026-0402CVE-2026-0401CVE-2026-0400