CVE-2024-6387 — regreSSHion Analysis

## CVE-2024-6387 — regreSSHion

A critical signal handler race condition in OpenSSH sshd allows unauthenticated RCE on glibc-based Linux systems.

**Affected versions:** OpenSSH 8.5p1 through 9.7p1

**Key details:**
- Race condition in SIGALRM handler
- Requires ~10k connections on average
- 32-bit systems: ~6-8 hours
- 64-bit systems: significantly harder (ASLR)

```bash
# Check version
ssh -V
# Mitigation
LoginGraceTime 0 # in sshd_config (disables the vector)
```

Full analysis thread. Drop your findings below.