Brand ClaimErleben, was verbindet

Information on the use of cookies

This website uses only the technically necessary cookies to provide you with the best possible service.
Your session is identified by a so-called session cookie in order to maintain your language choice and to allow a comfortable form use. Furthermore, a login is only possible by using a cookie.
Further information can be found in the data protection information.

Accept

Advisory 2024-1356 - OpenSSH: Vulnerability allows code execution

Notice: This advisory is by exception shown completely public. You will regularly receive details on vulnerability information as a customer via your login or through our daily advisory e-mail.
5
Attack probability
high
5
Potential damage
high
remote anonymous attackerExploit available
Date
2024-07-01
Release
2024-10-29 UPDATE

Operating System

  • Appliance
  • CISCO Appliance
  • Hardware Appliance
  • Linux
  • Sonstiges
  • UNIX

Software

  • Debian Linux
  • FreeBSD Project FreeBSD OS
  • Open Source OpenSSH >= 8.5p1
  • Open Source OpenSSH < 9.8p1
  • UPDATE 2024-07-02
  • Amazon Linux 2
  • Fedora Linux
  • Oracle Linux
  • WatchGuard Firebox
  • UPDATE 2024-07-03
  • IGEL OS < 11.10.150
  • IGEL OS < 12.4.2
  • NetBSD Foundation NetBSD OS
  • QNAP NAS
  • SUSE Linux
  • UPDATE 2024-07-04
  • Red Hat Enterprise Linux
  • Securepoint UTM < 12.6.5.1
  • UPDATE 2024-07-08
  • Cisco Aironet Access Point 1540
  • Cisco Aironet Access Point 1560
  • Cisco Aironet Access Point 802.11ac Wave2
  • Cisco ASA (Adaptive Security Appliance)
  • Cisco Catalyst 9100 Series Access Points
  • Cisco Catalyst IW6300 Heavy Duty Series Access Points
  • Cisco Catalyst IW9165 Heavy Duty Series
  • Cisco Catalyst IW9165 Rugged Series
  • Cisco Catalyst IW9167 Heavy Duty Series
  • Cisco Emergency Responder
  • Cisco Expressway
  • Cisco Firepower Management Center
  • Cisco Firepower Threat Defense
  • Cisco FXOS Firepower Chassis Manager
  • Cisco Identity Services Engine (ISE)
  • Cisco Meeting Server
  • Cisco Nexus 3000
  • Cisco Nexus 9000
  • Cisco Router ASR 5000
  • Cisco TelePresence Video Communication Server
  • Cisco Unified Communications Manager (CUCM)
  • Cisco Unity Connection
  • Cisco Wireless Access Point 6300 Series Embedded
  • UPDATE 2024-07-09
  • Arista EOS
  • Cisco Evolved Programmable Network Manager
  • Cisco IP Phone 9841
  • Cisco IP Phone 9851
  • Cisco Prime Infrastructure
  • Cisco Smart Software Manager On-Prem
  • HAProxy ALOHA < 14.5.23
  • HAProxy ALOHA < 15.5.12
  • HAProxy ALOHA < 16.0.2
  • HAProxy Enterprise < 2024-07-04
  • UPDATE 2024-07-10
  • Cisco IOS XE
  • Cisco Unified Contact Center Express (UCCX)
  • IBM AIX 3.1
  • IBM AIX 4.1
  • IBM AIX 7.2
  • IBM AIX 7.3
  • UPDATE 2024-07-11
  • Cisco Secure Email Gateway
  • Cisco Secure Web Appliance
  • UPDATE 2024-07-15
  • Aruba ArubaOS CX Switches
  • Aruba EdgeConnect SD-WAN Orchestrator
  • Aruba Switch CX
  • OTRS OTRS SaaS platform < 2024-07
  • UPDATE 2024-07-16
  • Alcatel Lucent Enterprise AOS
  • Alcatel Lucent Enterprise Desk Phone
  • Alcatel Lucent Enterprise OmniSwitch
  • UPDATE 2024-07-17
  • Cisco Catalyst 9800 Series Wireless Controllers
  • Cisco Nexus Dashboard
  • UPDATE 2024-07-22
  • Cisco Application Policy Infrastructure Controller
  • UPDATE 2024-07-24
  • Meinberg LANTIME < V7.08.014
  • UPDATE 2024-07-25
  • Huawei AC6805
  • Huawei AirEngine
  • Huawei CloudEngine
  • Huawei FusionServer Pro
  • Huawei iMaster NCE-Campus
  • Huawei iMaster NCE-CampusInsight
  • Huawei iMaster NCE Fabric
  • Huawei iMaster NCE FabricInsight
  • Huawei NetEngine
  • Huawei OceanStor
  • Huawei Router
  • UPDATE 2024-07-26
  • WatchGuard Firebox < 12.10.4 Update 1
  • UPDATE 2024-08-02
  • Moxa Router EDR-8010 < 3.12
  • Moxa Router EDR-G9010 < 3.12
  • Moxa Router OnCell G4302-LTE4 < 3.12
  • Ubuntu Linux
  • UPDATE 2024-08-08
  • IBM DB2 Cloud Pak
  • UPDATE 2024-08-15
  • Dell integrated Dell Remote Access Controller < 7.00.00.173
  • Dell integrated Dell Remote Access Controller < 7.10.50.10
  • Securepoint UTM < 12.7.2
  • UPDATE 2024-09-02
  • Dell PowerScale
  • UPDATE 2024-09-10
  • Phoenix Contact FL MGUARD < 10.4.1
  • Phoenix Contact FL MGUARD < 8.9.3
  • UPDATE 2024-09-12
  • Fortinet FortiAnalyzer
  • Fortinet FortiAuthenticator
  • Fortinet FortiMail
  • Fortinet FortiManager
  • Fortinet FortiVoice
  • Fortinet FortiWeb
  • UPDATE 2024-10-29
  • HPE HP-UX sshd < A.09.30.007

Attack

A remote anonymous attacker can exploit a vulnerability in OpenSSH in order to execute arbitrary code with root rights.

Description

OpenSSH is an open-source implementation of the Secure Shell Protocol.

CVE-2024-6387

There is a vulnerability in OpenSSH. In glibc-based systems, a signal handler race condition occurs in sshd under certain circumstances. A remote, anonymous attacker can exploit this vulnerability to execute arbitrary code with root rights.

CVSSv2 Base Score: 5.1 / Temporal Score: 4.4
AV:N/AC:H/AU:N/C:P/I:P/A:P/E:H/RL:OF/RC:ND
CVSSv3.1 Base Score: 8.1 / Temporal Score: 7.7
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:X

UPDATE 2024-07-04
According to reports, the vulnerability is being exploited in targeted attacks.

Recommendation

The developers provide updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

FreeBSD provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://security.FreeBSD.org/advisories/FreeBSD-SA-24:04.openssh.asc

Debian provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://lists.debian.org/debian-security-announce/2024/msg00135.html

UPDATE 2024-07-02

Oracle Linux provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://linux.oracle.com/errata/ELSA-2024-12468.html

Amazon provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://alas.aws.amazon.com/AL2023/ALAS-2024-649.html

WatchGuard provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00012

Fedora provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-213f33544e
https://bodhi.fedoraproject.org/updates/FEDORA-2024-dc89a2e1bf

UPDATE 2024-07-03

SUSE provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018851.html

QNAP provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.qnap.com/de-de/security-advisory/QSA-24-31

NetBSD provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc

IGEL announces updates
https://kb.igel.com/securitysafety/en/isn-2024-17-openssh-vulnerability-131268877.html

UPDATE 2024-07-04

Red Hat provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://access.redhat.com/errata/RHSA-2024:4312

Securepoint provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://wiki.securepoint.de/UTM/Changelog

SUSE provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018867.html

UPDATE 2024-07-05

Oracle Linux provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://linux.oracle.com/errata/ELSA-2024-4312.html

UPDATE 2024-07-08

Cisco provides updates for some products and announces further updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024

Red Hat provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://access.redhat.com/errata/RHSA-2024:4340

UPDATE 2024-07-09

Arista provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100

Red Hat provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://access.redhat.com/errata/RHSA-2024:4389

HAProxy provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.haproxy.com/blog/cve-2024-6387

UPDATE 2024-07-10

IBM provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.ibm.com/support/pages/node/7159920

UPDATE 2024-07-15

OTRS updated their SaaS Platform.
https://otrs.com/release-notes/otrs-security-advisory-2024-08/

HPE Aruba provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04669en_us&docLocale=en_US

UPDATE 2024-07-16

ALE provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.al-enterprise.com/-/media/assets/internet/documents/n-to-s/sa-a0010-ed02.pdf

Cisco provides further Information
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024

UPDATE 2024-07-17

Red Hat provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://access.redhat.com/errata/RHSA-2024:4479
https://access.redhat.com/errata/RHSA-2024:4469
https://access.redhat.com/errata/RHSA-2024:4484

UPDATE 2024-07-19
https://access.redhat.com/errata/RHSA-2024:4631
https://access.redhat.com/errata/RHSA-2024:4474

UPDATE 2024-07-22

Cisco provides further Information
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024

UPDATE 2024-07-24

Meinberg provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2024-04-lantime-firmware-v7-08-014.htm

UPDATE 2024-07-25

Huawei provides updates for registered customers. Please update your installation and see the vendors advisory to find the proper version suitable for your environment.
https://securitybulletin.huawei.com/enterprise/en/security-advisory

UPDATE 2024-07-26

WatchGuard provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.watchguard.com/wgrd-blog/watchguard-fireware-v12104-update-1-available-now

UPDATE 2024-08-02

Ubuntu provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://ubuntu.com/security/notices/USN-6942-1

moxa provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246387-multiple-moxa-product-series-affected-by-cve-2024-6387

UPDATE 2024-08-08

FreeBSD provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://security.FreeBSD.org/advisories/FreeBSD-SA-24:08.openssh.asc

IBM provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.ibm.com/support/pages/node/7163719

UPDATE 2024-08-15

Ubuntu provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://ubuntu.com/security/notices/USN-6960-1

Securepoint provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://wiki.securepoint.de/UTM/Changelog

Dell provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.dell.com/support/kbdoc/de-de/000227795/dsa-2024-342-security-update-for-dell-idrac9-openssh-vulnerability

UPDATE 2024-08-23

Ubuntu provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://ubuntu.com/security/notices/USN-6859-1

UPDATE 2024-09-02

Dell provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.dell.com/support/kbdoc/en-us/000228207/dsa-2024-346-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

UPDATE 2024-09-10

Phoenix Contact provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://dam-mdc.phoenixcontact.com/asset/156443151564/b9ce1d5716385f4b9cd6a9c91a9e2c8a/Security_Advisory_FL_MGUARD_VDE_2024_051.pdf

UPDATE 2024-09-12

Fortinet provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://www.fortiguard.com/psirt/FG-IR-24-258

UPDATE 2024-10-29

HPE provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04725en_us&docLocale=en_US

Information

Qualys Blog dated 2024-06-30
https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

FreeBSD Security Advisory FREEBSD-SA-24:04.OPENSSH dated 2024-07-01
https://security.FreeBSD.org/advisories/FreeBSD-SA-24:04.openssh.asc

Debian Security Advisory DSA-5724 dated 2024-07-01
https://lists.debian.org/debian-security-announce/2024/msg00135.html

UPDATE 2024-07-02

Oracle Linux Security Advisory ELSA-2024-12468 dated 2024-07-01
https://linux.oracle.com/errata/ELSA-2024-12468.html

Amazon Linux Security Advisory ALAS-2024-649 dated 2024-07-02
https://alas.aws.amazon.com/AL2023/ALAS-2024-649.html

WatchGuard Security Advisory WGSA-2024-00012 dated 2024-07-01
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00012

Fedora Security Advisory FEDORA-2024-213F33544E dated 2024-07-02
https://bodhi.fedoraproject.org/updates/FEDORA-2024-213f33544e

Fedora Security Advisory FEDORA-2024-DC89A2E1BF dated 2024-07-02
https://bodhi.fedoraproject.org/updates/FEDORA-2024-dc89a2e1bf

UPDATE 2024-07-03

SUSE Security Update SUSE-SU-2024:2275-1 dated 2024-07-02
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018851.html

QNAP Security Advisory QSA-24-31 dated 2024-07-02
https://www.qnap.com/de-de/security-advisory/QSA-24-31

NetBSD Security Advisory NETBSD-SA2024-002 dated 2024-07-02
https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc

IGEL Product Security Information dated 2024-07-03
https://kb.igel.com/securitysafety/en/isn-2024-17-openssh-vulnerability-131268877.html

UPDATE 2024-07-04

Veriti Blog dated 2024-07-03
https://veriti.ai/blog/regresshion-cve-2024-6387-a-targeted-exploit-in-the-wild/

Red Hat Security Advisory RHSA-2024:4312 dated 2024-07-03
https://access.redhat.com/errata/RHSA-2024:4312

Securepoint UTM Changelog dated 2024-07-03
https://wiki.securepoint.de/UTM/Changelog

SUSE Security Update SUSE-SU-2024:2275-2 dated 2024-07-04
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018867.html

UPDATE 2024-07-05

Oracle Linux Security Advisory ELSA-2024-4312 dated 2024-07-04
https://linux.oracle.com/errata/ELSA-2024-4312.html

UPDATE 2024-07-08

Cisco Security Advisory CISCO-SA-OPENSSH-RCE-2024 dated 2024-07-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024

Red Hat Security Advisory RHSA-2024:4340 dated 2024-07-05
https://access.redhat.com/errata/RHSA-2024:4340

UPDATE 2024-07-09

Arista Security Advisory dated 2024-07-08
https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100

Red Hat Security Advisory RHSA-2024:4389 dated 2024-07-08
https://access.redhat.com/errata/RHSA-2024:4389

HAProxy Security Update
https://www.haproxy.com/blog/cve-2024-6387

UPDATE 2024-07-10

IBM Security Bulletin 7159920 dated 2024-07-10
https://www.ibm.com/support/pages/node/7159920

UPDATE 2024-07-15

OTRS Security Advisory OSA-2024-08 dated 2024-07-15
https://otrs.com/release-notes/otrs-security-advisory-2024-08/

HPE Security Bulletin hpesbnw04669 dated 2024-07-10
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04669en_us&docLocale=en_US

UPDATE 2024-07-16

ALE Security Advisory
https://www.al-enterprise.com/-/media/assets/internet/documents/n-to-s/sa-a0010-ed02.pdf

UPDATE 2024-07-17

Red Hat Security Advisory RHSA-2024:4479 dated 2024-07-17
https://access.redhat.com/errata/RHSA-2024:4479

Red Hat Security Advisory RHSA-2024:4469 dated 2024-07-17
https://access.redhat.com/errata/RHSA-2024:4469

Red Hat Security Advisory RHSA-2024:4484 dated 2024-07-17
https://access.redhat.com/errata/RHSA-2024:4484

UPDATE 2024-07-19

Red Hat Security Advisory RHSA-2024:4631 dated 2024-07-18
https://access.redhat.com/errata/RHSA-2024:4631

Red Hat Security Advisory RHSA-2024:4474 dated 2024-07-19
https://access.redhat.com/errata/RHSA-2024:4474

UPDATE 2024-07-24

Meinberg Security Advisory dated 2024-07-22
https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2024-04-lantime-firmware-v7-08-014.htm

UPDATE 2024-07-25

Huawei Security Advisory HWPSIRT-2024-56267 huawei-sa-ORCEViSHP-90459233 vom 2024-07-22 dated 2024-07-24
https://securitybulletin.huawei.com/enterprise/en/security-advisory

UPDATE 2024-07-26

WatchGuard Fireware Advisory dated 2024-07-26
https://www.watchguard.com/wgrd-blog/watchguard-fireware-v12104-update-1-available-now

UPDATE 2024-08-02

Ubuntu Security Notice USN-6942-1 dated 2024-08-01
https://ubuntu.com/security/notices/USN-6942-1

Moxa Security Advisory MPSA-246387 dated 2024-08-02
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246387-multiple-moxa-product-series-affected-by-cve-2024-6387

UPDATE 2024-08-08

FreeBSD Security Advisory FREEBSD-SA-24:08.OPENSSH dated 2024-08-07
https://security.FreeBSD.org/advisories/FreeBSD-SA-24:08.openssh.asc

IBM Security Bulletin 7163719 dated 2024-08-07
https://www.ibm.com/support/pages/node/7163719

UPDATE 2024-08-15

Ubuntu Security Notice USN-6960-1 dated 2024-08-14
https://ubuntu.com/security/notices/USN-6960-1

Securepoint UTM Changelog dated 2024-08-14
https://wiki.securepoint.de/UTM/Changelog

Dell Security Advisory DSA-2024-342 dated 2024-08-14
https://www.dell.com/support/kbdoc/de-de/000227795/dsa-2024-342-security-update-for-dell-idrac9-openssh-vulnerability

UPDATE 2024-08-23

Ubuntu Security Notice USN-6859-1
https://ubuntu.com/security/notices/USN-6859-1

UPDATE 2024-09-02

DELL Security Update for Dell PowerScale OneFS
https://www.dell.com/support/kbdoc/en-us/000228207/dsa-2024-346-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

UPDATE 2024-09-10

Phoenix Contact Security Advisory VDE-2024-051 dated 2024-09-04
https://dam-mdc.phoenixcontact.com/asset/156443151564/b9ce1d5716385f4b9cd6a9c91a9e2c8a/Security_Advisory_FL_MGUARD_VDE_2024_051.pdf

UPDATE 2024-09-12

FortiGuard Labs PSIRT Advisory FG-IR-24-258 dated 2024-09-11
https://www.fortiguard.com/psirt/FG-IR-24-258

UPDATE 2024-10-29

HPE Security Bulletin dated 2024-10-28
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04725en_us&docLocale=en_US

References

AMAZONLINUX:ALAS-2024-649
CISCO-ADV-ID:CISCO-SA-OPENSSH-RCE-2024
CISCO-BUG:CSCWK61235
CISCO-BUG:CSCWK61618
CISCO-BUG:CSCWK61630
CISCO-BUG:CSCWK61938
CISCO-BUG:CSCWK62244
CISCO-BUG:CSCWK62248
CISCO-BUG:CSCWK62269
CISCO-BUG:CSCWK62270
CISCO-BUG:CSCWK62273
CISCO-BUG:CSCWK62276
CISCO-BUG:CSCWK62277
CISCO-BUG:CSCWK62286
CISCO-BUG:CSCWK62288
CISCO-BUG:CSCWK62289
CISCO-BUG:CSCWK62290
CISCO-BUG:CSCWK62297
CISCO-BUG:CSCWK62311
CISCO-BUG:CSCWK62315
CISCO-BUG:CSCWK62318
CISCO-BUG:CSCWK63145
CISCO-BUG:CSCWK63494
CISCO-BUG:CSCWK63634
CISCO-BUG:CSCWK63694
CVE:CVE-2024-6387
DEBIAN:DSA-5724
DELL:DSA-2024-342
DELL:DSA-2024-346
FEDORA:FEDORA-2024-213F33544E
FEDORA:FEDORA-2024-DC89A2E1BF
FORTINET:FG-IR-24-258
FREEBSD:FREEBSD-SA-24:04.OPENSSH
FREEBSD:FREEBSD-SA-24:08.OPENSSH
HP:HPESBNW04669
HP:HPESBUX04725
HUAWEI:HUAWEI-SA-ORCEVISHP-90459233
HUAWEI:HWPSIRT-2024-56267
IBM:7159920
IBM:7163719
IGEL:ISN-2024-17
MEINBERG:MBGSA-2024.04
MOXA:MPSA-246387
NETBSD:NETBSD-SA2024-002
ORACLELINUX:ELSA-2024-12468
ORACLELINUX:ELSA-2024-4312
OTRS:OSA-2024-08
QNAP:QSA-24-31
REDHAT:RHSA-2024:4312
REDHAT:RHSA-2024:4340
REDHAT:RHSA-2024:4389
REDHAT:RHSA-2024:4469
REDHAT:RHSA-2024:4474
REDHAT:RHSA-2024:4479
REDHAT:RHSA-2024:4484
REDHAT:RHSA-2024:4631
SUSE:SUSE-SU-2024:2275-1
SUSE:SUSE-SU-2024:2275-2
UBUNTU:USN-6859-1
UBUNTU:USN-6942-1
UBUNTU:USN-6960-1
VDE:VDE-2024-051
VULNAME:REGRESSHION
WATCHGUARD:WGSA-2024-00012

Disclaimer

*The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirect consequences of an attack for business processes. Telekom Security assumes worst case scenarios.

Copyright © 1999-2024 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.

The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.