CVE-2024-6387

Published Jul 1, 2024·Updated Oct 15, 2026

NVD Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Public Exploits & PoCs10 found

[POC] CVE-2024-6387 — spirit

Spirit - Network Pentest Tools CVE-2024-6387

[POC] CVE-2024-6387 — cve-2024-6387-poc

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

[POC] CVE-2024-6387 — CVE-2024-6387-PoC

PoC RCE in OpenSSH

[POC] CVE-2024-6387 — CVE-2024-6387_Check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

[POC] CVE-2024-6387 — cve-2024-6387-poc

Exploit for CVE-2024-6387 targeting a race condition in OpenSSH's signal handler on glibc-based Linux, enabling remote code execution and root access via unsafe async signal functions in SIGALRM handler.

[POC] CVE-2024-6387 — cve-2024-6387-poc

32-bit PoC for CVE-2024-6387 "regreSSHion" -- mirror of the original 7etsuo/cve-2024-6387-poc

[POC] CVE-2024-6387 — CVE-2024-6387

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

[POC] CVE-2024-6387 — CVE-2024-6387-Vulnerability-Checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.

[POC] CVE-2024-6387 — ssh_exploiter_CVE-2024-6387

CVE-2024-6387 with auto ip scanner and auto expliot

[POC] CVE-2024-6387 — test_for6387

test code for cve-2024-6387