{"schema_version":"1","data":[{"id":32378,"advisory_id":"8c471f9d-d7b0-4d2a-8652-0c002d773abe","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-80158","source_published_at":"2026-08-26T22:06:07.301+00:00","published_at":"2026-10-25T08:48:43.32038+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-ceph-storage-5","red-hat-ceph-storage-9","red-hat-openstack-platform-17-1","red-hat-openstack-platform-18-0"],"cve_ids":["CVE-2026-80158"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings","summary":"A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's \"Invoked with\" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw ), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.","evidence":"cve:CVE-2026-80158","products":[{"name":{"value":"Red Hat Ceph Storage 5","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 17.1","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 18.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-80158","aliases":["CVE-2026-80158"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:ceph_storage:5"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"ansible-collection-community-general","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","packageName":"ansible-collection-community-general","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:17.1"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","packageName":"ansible-collection-community-general","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:18.0"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"ansible-collection-community-general","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-16T11:54:39.335Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-80158","https://bugzilla.redhat.com/show_bug.cgi?id=2524651"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-80158","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-27T14:46:33.318729Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-27T14:47:51.443Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-16T11:54:39.335Z"}}},"related_cves":[{"value":"CVE-2026-80158","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":28475,"advisory_id":"288968c5-a505-45c5-aa16-5871aec5c11a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-6387","source_published_at":"2024-07-01T12:37:25.431+00:00","published_at":"2026-10-25T07:43:11.493868+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-ceph-storage-5","red-hat-ceph-storage-6","red-hat-ceph-storage-7","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-extended-update-support","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16"],"cve_ids":["CVE-2024-6387"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Openssh: regresshion - race condition in ssh allows rce/dos","summary":"A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","evidence":"cve:CVE-2024-6387","products":[{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Extended Update Support","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 5","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 6","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2024-6387","aliases":["CVE-2024-6387"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://anongit.mindrot.org/openssh.git","versions":[{"status":"affected","version":"8.5p1","versionType":"custom","lessThanOrEqual":"9.7p1"}],"packageName":"OpenSSH","collectionURL":"https://www.openssh.com/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:8.7p1-12.el9_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream","cpe:/o:redhat:rhel_eus:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.7p1-30.el9_2.4","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202407091321-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202407091253-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202407091355-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202407081958-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:5"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ceph_storage:6"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ceph_storage:7"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-15T02:04:17.778Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:4312","https://access.redhat.com/errata/RHSA-2024:4340","https://access.redhat.com/errata/RHSA-2024:4389","https://access.redhat.com/errata/RHSA-2024:4469","https://access.redhat.com/errata/RHSA-2024:4474","https://access.redhat.com/errata/RHSA-2024:4479","https://access.redhat.com/errata/RHSA-2024:4484","https://access.redhat.com/security/cve/CVE-2024-6387","https://bugzilla.redhat.com/show_bug.cgi?id=2294604","https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","https://www.openssh.com/txt/release-9.8","https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-6387","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-07-02T13:18:34.695298Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-07-02T13:18:46.662Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.vicarius.io/vsociety/posts/regresshion-an-openssh-regression-error-cve-2024-6387"},{"url":"https://www.exploit-db.com/exploits/52269"},{"url":"https://packetstorm.news/files/id/190587/"},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/12","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/13","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/02/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/11","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/03/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/04/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/04/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/08/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/08/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/09/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/09/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/10/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/10/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/10/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/10/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/10/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/11/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/11/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/23/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/23/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/28/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/28/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4312","name":"RHSA-2024:4312","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4340","name":"RHSA-2024:4340","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4389","name":"RHSA-2024:4389","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4469","name":"RHSA-2024:4469","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4474","name":"RHSA-2024:4474","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4479","name":"RHSA-2024:4479","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4484","name":"RHSA-2024:4484","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-6387","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/","tags":["x_transferred"]},{"url":"https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/","tags":["x_transferred"]},{"url":"https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server","tags":["x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294604","name":"RHBZ#2294604","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://explore.alas.aws.amazon.com/CVE-2024-6387.html","tags":["x_transferred"]},{"url":"https://forum.vmssoftware.com/viewtopic.php?f=8&t=9132","tags":["x_transferred"]},{"url":"https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc","tags":["x_transferred"]},{"url":"https://github.com/AlmaLinux/updates/issues/629","tags":["x_transferred"]},{"url":"https://github.com/Azure/AKS/issues/4379","tags":["x_transferred"]},{"url":"https://github.com/PowerShell/Win32-OpenSSH/discussions/2248","tags":["x_transferred"]},{"url":"https://github.com/PowerShell/Win32-OpenSSH/issues/2249","tags":["x_transferred"]},{"url":"https://github.com/microsoft/azurelinux/issues/9555","tags":["x_transferred"]},{"url":"https://github.com/openela-main/openssh/commit/e1f438970e5a337a17070a637c1b9e19697cad09","tags":["x_transferred"]},{"url":"https://github.com/oracle/oracle-linux/issues/149","tags":["x_transferred"]},{"url":"https://github.com/rapier1/hpn-ssh/issues/87","tags":["x_transferred"]},{"url":"https://github.com/zgzhang/cve-2024-6387-poc","tags":["x_transferred"]},{"url":"https://lists.almalinux.org/archives/list/announce@lists.almalinux.org/thread/23BF5BMGFVEVUI2WNVAGMLKT557EU7VY/","tags":["x_transferred"]},{"url":"https://lists.mindrot.org/pipermail/openssh-unix-announce/2024-July/000158.html","tags":["x_transferred"]},{"url":"https://lists.mindrot.org/pipermail/openssh-unix-dev/2024-July/041431.html","tags":["x_transferred"]},{"url":"https://news.ycombinator.com/item?id=40843778","tags":["x_transferred"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0010","tags":["x_transferred"]},{"url":"https://santandersecurityresearch.github.io/blog/sshing_the_masses.html","tags":["x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-6387","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240701-0001/","tags":["x_transferred"]},{"url":"https://sig-security.rocky.page/issues/CVE-2024-6387/","tags":["x_transferred"]},{"url":"https://stackdiary.com/openssh-race-condition-in-sshd-allows-remote-code-execution/","tags":["x_transferred"]},{"url":"https://ubuntu.com/security/CVE-2024-6387","tags":["x_transferred"]},{"url":"https://ubuntu.com/security/notices/USN-6859-1","tags":["x_transferred"]},{"url":"https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do","tags":["x_transferred"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/19904-security-advisory-0100","tags":["x_transferred"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc","tags":["x_transferred"]},{"url":"https://www.openssh.com/txt/release-9.8","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt","tags":["x_transferred"]},{"url":"https://www.splunk.com/en_us/blog/security/cve-2024-6387-regresshion-vulnerability.html","tags":["x_transferred"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6387.html","tags":["x_transferred"]},{"url":"https://www.theregister.com/2024/07/01/regresshion_openssh/","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT214119","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT214118","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT214120","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/20","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/18","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/19","tags":["x_transferred"]}],"x_generator":{"engine":"ADPogram 0.0.1"},"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-04-24T18:35:27.934Z"}},{"affected":[{"vendor":"Siemens","product":"Industrial Edge Management OS (IEM-OS)","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINAMICS IIoT module","versions":[{"status":"affected","version":"0","lessThan":"V1.0 HF1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEMA Remote Connect Server","versions":[{"status":"affected","version":"0","lessThan":"V3.2 SP2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINUMERIK ONE","versions":[{"status":"affected","version":"0","lessThan":"V6.24","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-446545.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:33:32.414Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-15T02:04:17.778Z"}}},"related_cves":[{"value":"CVE-2024-6387","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":32378,"next_before":28475}