Mitigating SSH CVE-2024-6387 vulnerability #4

New issue

Closed

opened 2024-07-01 21:25:41 +02:00 by neox · 2 comments

neox commented

2024-07-01 21:25:41 +02:00

Owner

Cf cominfra/infra-generale#190

We applied on your server an SSH configuration modification to mitigate the CVE-2024-6387 vulnerability :

commit de31604877158cc617c869981c464fb4bf5b8395
Author: root <root@server.speed-dreams.net>
Date:   Mon Jul 1 21:20:07 2024 +0200

    mitigation CVE-2024-6387

hd_config
index 87897b8..c27edb8 100644
--- a/ssh/sshd_config
+++ b/ssh/sshd_config
@@ -12,6 +12,7 @@ AllowTcpForwarding yes
 GatewayPorts yes
 X11Forwarding no
 PrintMotd no
+LoginGraceTime 0
 TCPKeepAlive yes
 PermitTunnel yes
 AcceptEnv LANG LC\_* GIT\_*

Cf https://forge.a-lec.org/cominfra/infra-generale/issues/190 We applied on your server an SSH configuration modification to mitigate the CVE-2024-6387 vulnerability : ```diff commit de31604877158cc617c869981c464fb4bf5b8395 Author: root <root@server.speed-dreams.net> Date: Mon Jul 1 21:20:07 2024 +0200 mitigation CVE-2024-6387 hd_config index 87897b8..c27edb8 100644 --- a/ssh/sshd_config +++ b/ssh/sshd_config @@ -12,6 +12,7 @@ AllowTcpForwarding yes GatewayPorts yes X11Forwarding no PrintMotd no +LoginGraceTime 0 TCPKeepAlive yes PermitTunnel yes AcceptEnv LANG LC\_* GIT\_* ```