A severe vulnerability in OpenSSH, dubbed “regreSSHion” (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing

  • lemmyvore@feddit.nl
    link
    fedilink
    English
    arrow-up
    17
    ·
    4 months ago

    Last I read about it it required connecting for 6-7 hours continuously on 32bit systems, and it’s unknown how long it would take on 64bit.

      • andrew@radiation.party
        link
        fedilink
        arrow-up
        5
        ·
        4 months ago

        But, eventually exploitable is still a pretty major concern for anybody who has systems running longer than a few days at a time.

        • tmpod@lemmy.ptOP
          link
          fedilink
          arrow-up
          3
          ·
          4 months ago

          True, an RCE is always a serious thing. Just saying it’s not exactly catastrophic like others have been more so.

        • whereisk@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          4 months ago

          I can’t imagine any system of influence running an exposed ssh without some further protection from connection abuse like fail2ban.