Skip to main content
5 votes
Accepted

How to tell if RegreSSHion was exploited (CVE-2024-6387)

Before a memory corruption, or arbitrary write can occur, the vulnerability is specifically based on the signal interrupt handling involved when a user taking too long to authenticate. This is why the ...
Al Longley's user avatar
3 votes
Accepted

Understanding how to correctly migitate CVE-2024-38095

Quoting that security advisory: If you have a runtime or SDK with a version listed, or an affected package listed in affected software or affected packages, you're exposed to the vulnerability. In ...
Brian's user avatar
  • 1,017
1 vote

How to tell if RegreSSHion was exploited (CVE-2024-6387)

I wonder whether attack attempts can be detected with lines in auth.log like that: 2024-07-02T08:57:28.226346+02:00 xxxxxx sshd[23851]: fatal: Timeout before authentication for 192.168.xxx.xxx port ...
cybermonk's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible