https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 16:57:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06777 bdu:2024-06777 https://cve.radiocsirt.org/vuln/bdu:2024-06777 https://cve.radiocsirt.org/vuln/euvd-2026-158902 EUVD-2026-158902 https://cve.radiocsirt.org/vuln/euvd-2026-158902 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7589 <p>A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in the context of the sshd(8)&#39;s privileged code, which is not sandboxed and runs with full root privileges.</p> <p>This issue is another instance of the problem in CVE-2024-6387 addressed by FreeBSD-SA-24:04.openssh. The faulty code in this case is from the integration of blacklistd in OpenSSH in FreeBSD.</p> <p>As a result of calling functions that are not async-signal-safe in the privileged sshd(8) context, a race condition exists that a determined attacker may be able to exploit to allow an unauthenticated remote code execution as root.</p> <p>A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in the context of the sshd(8)&#39;s privileged code, which is not sandboxed and runs with full root privileges.</p> <p>This issue is another instance of the problem in CVE-2024-6387 addressed by FreeBSD-SA-24:04.openssh. The faulty code in this case is from the integration of blacklistd in OpenSSH in FreeBSD.</p> <p>As a result of calling functions that are not async-signal-safe in the privileged sshd(8) context, a race condition exists that a determined attacker may be able to exploit to allow an unauthenticated remote code execution as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7589 https://cve.radiocsirt.org/vuln/ghsa-j7jm-6q5x-ffr4 <p>A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in the context of the sshd(8)&#39;s privileged code, which is not sandboxed and runs with full root privileges.</p> <p>This issue is another instance of the problem in CVE-2024-6387 addressed by FreeBSD-SA-24:04.openssh. The faulty code in this case is from the integration of blacklistd in OpenSSH in FreeBSD.</p> <p>As a result of calling functions that are not async-signal-safe in the privileged sshd(8) context, a race condition exists that a determined attacker may be able to exploit to allow an unauthenticated remote code execution as root.</p> <p>A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in the context of the sshd(8)&#39;s privileged code, which is not sandboxed and runs with full root privileges.</p> <p>This issue is another instance of the problem in CVE-2024-6387 addressed by FreeBSD-SA-24:04.openssh. The faulty code in this case is from the integration of blacklistd in OpenSSH in FreeBSD.</p> <p>As a result of calling functions that are not async-signal-safe in the privileged sshd(8) context, a race condition exists that a determined attacker may be able to exploit to allow an unauthenticated remote code execution as root.</p> https://cve.radiocsirt.org/vuln/ghsa-j7jm-6q5x-ffr4 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1793 <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu verändern und beliebigen Code als root auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu verändern und beliebigen Code als root auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1793