Faille SSH (CVE-2024-6387) avec RCE et DDoS

neox commented

2024-07-01 20:11:39 +02:00

Owner

Copy link

Description de la faille :

We discovered a vulnerability (a signal handler race condition) in
OpenSSH's server (sshd): if a client does not authenticate within
LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions),
then sshd's SIGALRM handler is called asynchronously, but this signal
handler calls various functions that are not async-signal-safe (for
example, syslog()). This race condition affects sshd in its default
configuration.

Plus d'infos : https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt

Mitigation pour les RCE : https://access.redhat.com/security/cve/CVE-2024-6387

Description de la faille : > We discovered a vulnerability (a signal handler race condition) in > OpenSSH's server (sshd): if a client does not authenticate within > LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), > then sshd's SIGALRM handler is called asynchronously, but this signal > handler calls various functions that are not async-signal-safe (for > example, syslog()). This race condition affects sshd in its default > configuration. Plus d'infos : https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt Mitigation pour les RCE : https://access.redhat.com/security/cve/CVE-2024-6387

neox added the

amont

bogue

labels 2024-07-01 20:11:44 +02:00

neox commented

2024-07-01 20:13:17 +02:00

Author

Owner

Copy link

Application de la contre-mesure pour chaque machine physique et virtuelle :

mise en place du paramètre LoginGraceTime 0 dans /etc/ssh/sshd_config
redémarrage du service sshd

Application de la contre-mesure *pour chaque machine physique et virtuelle* : - mise en place du paramètre `LoginGraceTime 0` dans `/etc/ssh/sshd_config` - redémarrage du service sshd

neox commented

2024-07-01 21:04:26 +02:00

Author

Owner

Copy link

Traitement des machines physiques :

mother.libre-en-communs.org
aunt.libre-en-communs.org
anthea.libre-en-communs.org
aelita.libre-en-communs.org
sauvkipeu.libre-en-communs.org
gardefou.libre-en-communs.org
avengard.libre-en-communs.org

Traitement des machines virtuelles :

petition.chalec.org
audio.a-lec.org
video.chalec.org
gestion.a-lec.org
pad.a-lec.org
ns1.libre-en-communs.org
dns.libre-en-communs.org
forge.chalec.org
isengard.libre-en-communs.org
libreverse.chalec.org
mail.a-lec.org
nuage.chalec.org
toot.chalec.org
xmpp.chalec.org
audio.chalec.org
forge.a-lec.org
ns0.libre-en-communs.org
pad.chalec.org
toot.a-lec.org
www.chalec.org
ctrlv.chalec.org
speed-dreams.net
stats.a-lec.org
stats.chalec.org
visio.chalec.org
www.a-lec.org
xmpp.a-lec.org

Traitement des machines physiques : - [x] mother.libre-en-communs.org - [x] aunt.libre-en-communs.org - [x] anthea.libre-en-communs.org - [x] aelita.libre-en-communs.org - [x] sauvkipeu.libre-en-communs.org - [x] gardefou.libre-en-communs.org - [x] avengard.libre-en-communs.org Traitement des machines virtuelles : - [x] petition.chalec.org - [x] audio.a-lec.org - [x] video.chalec.org - [x] gestion.a-lec.org - [x] pad.a-lec.org - [x] ns1.libre-en-communs.org - [x] dns.libre-en-communs.org - [x] forge.chalec.org - [x] isengard.libre-en-communs.org - [x] libreverse.chalec.org - [x] mail.a-lec.org - [x] nuage.chalec.org - [x] toot.chalec.org - [x] xmpp.chalec.org - [x] audio.chalec.org - [x] forge.a-lec.org - [x] ns0.libre-en-communs.org - [x] pad.chalec.org - [x] toot.a-lec.org - [x] www.chalec.org - [x] ctrlv.chalec.org - [x] speed-dreams.net - [x] stats.a-lec.org - [x] stats.chalec.org - [x] visio.chalec.org - [x] www.a-lec.org - [x] xmpp.a-lec.org

neox added the

en cours

label 2024-07-01 21:07:03 +02:00

neox referenced this issue from cominfra/speed-dreams

2024-07-01 21:25:41 +02:00

Mitigating SSH CVE-2024-6387 vulnerability #4

neox commented

2024-07-02 09:29:31 +02:00

Author

Owner

Copy link

Action terminée