CVE-2024-6387
HighAdvisory
Published 1 Jul 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.995
- 100th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 93
- of 17,781 indexed, latest versions
- Container images
- 79
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: openssh security update
Carried by container images the latest versions of 93 of 17,781 indexed charts deploy, on 79 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:8.9p1-3, 1:8.9p1-3ubuntu0.1, 1:8.9p1-3ubuntu0.4, 1:8.9p1-3ubuntu0.6+4 more | 1:8.9p1-3ubuntu0.10, 1:9.2p1-2+deb12u3 | 56 |
| opensshapk | 9.1_p1-r1, 9.1_p1-r2, 9.3_p1-r3, 9.3_p2-r0+3 more | 9.1_p1-r6, 9.3_p2-r2, 9.6_p1-r1, 9.7_p1-r4 | 21 |
| opensshrpm | 8.7p1-30.el9_2, 8.7p1-38.el9 | 0:8.7p1-38.el9_4.1 | 2 |
- OSV records
- ALPINE-CVE-2024-6387DEBIAN-CVE-2024-6387RHSA-2024:4312UBUNTU-CVE-2024-6387
- Also known as
- DSA-5724-1, RHSA-2024:4340, USN-6859-1
Charts affected
93 by stars
Container images carrying it
79 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 95d6f0e05636 | openssh | 1:9.2p1-2+deb12u3 | 6 |
| library/ | af96c680a7e1 | openssh | 9.3_p2-r2 | 3 |
| quay.io/ | 2b6db27eaf3d | openssh | 1:8.9p1-3ubuntu0.10 | 3 |
| cfssl/ | c9018c2ddf0b | openssh | 1:9.2p1-2+deb12u3 | 2 |
| dtzar/ | 55429449408e | openssh | 9.6_p1-r1 | 2 |
| gjeanmart/ | 926264c8f2d1 | openssh | 1:9.2p1-2+deb12u3 | 2 |
| jenkins/ | b470bcdc4ecd | openssh | 1:9.2p1-2+deb12u3 | 2 |
| library/ | eedf63967cdb | openssh | 1:9.2p1-2+deb12u3 | 2 |
| moreillon/ | e1c9bfab5c16 | openssh | 1:9.2p1-2+deb12u3 | 2 |
| qichenxu4pd/ | f3a8502bc21b | openssh | 1:9.2p1-2+deb12u3 | 2 |
| svtechnmaa/ | b2987abe57d3 | openssh | 1:8.9p1-3ubuntu0.10 | 2 |
| uffizzi/ | 0344805f267b | openssh | 1:9.2p1-2+deb12u3 | 2 |
| ghcr.io/ | 5be52524664c | openssh | 1:8.9p1-3ubuntu0.10 | 2 |
| apache/ | 64e58748b6b9 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| apache/ | e5560ad0b86e | openssh | 1:9.2p1-2+deb12u3 | 1 |
| artur9010/ | 6b4de3ce8b0e | openssh | 1:9.2p1-2+deb12u3 | 1 |
| assistiot/ | b1dbe4d62a03 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| avinash263/ | aa2b8727f1a6 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| dblaci/ | eea697611af4 | openssh | 1:8.9p1-3ubuntu0.10 | 1 |
| dtzar/ | a1041bb0f1d1 | openssh | 9.1_p1-r6 | 1 |
| epamedp/ | 28ef56bc0ca3 | openssh | 9.3_p2-r2 | 1 |
| esphome/ | 9ab8cc88b28c | openssh | 1:9.2p1-2+deb12u3 | 1 |
| gitea/ | ac73e0da341f | openssh | 9.3_p2-r2 | 1 |
| hashicorp/ | 4dcb45513699 | openssh | 9.3_p2-r2 | 1 |
| helicone/ | 4a913936c97b | openssh | 1:9.2p1-2+deb12u3 | 1 |
| hiboxsystems/ | dcffb926e563 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| hmediade/ | 7f005eb6c718 | openssh | 1:8.9p1-3ubuntu0.10 | 1 |
| homeassistant/ | 021e2afc6e57 | openssh | 9.3_p2-r2 | 1 |
| homeassistant/ | 8d000332b09b | openssh | 9.3_p2-r2 | 1 |
| ildarmukhametzyanov/ | 15d23720a3ee | openssh | 1:9.2p1-2+deb12u3 | 1 |
| inseefrlab/ | 31f04ca7436b | openssh | 1:8.9p1-3ubuntu0.10 | 1 |
| intelowlproject/ | 0b22e547ea6b | openssh | 1:9.2p1-2+deb12u3 | 1 |
| jenkins/ | de4fea113221 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| kfirfer/ | c257c1e0e8b9 | openssh | 9.3_p2-r2 | 1 |
| knspar/ | 0c4f0543ee58 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| library/ | 1d148deae16a | openssh | 9.3_p2-r2 | 1 |
| library/ | 3153fa63f546 | openssh | 9.1_p1-r6 | 1 |
| library/ | afa5d5134900 | openssh | 9.3_p2-r2 | 1 |
| library/ | d9a0fd8bdd15 | openssh | 9.1_p1-r6 | 1 |
| linuxserver/ | a5e43a05ae79 | openssh | 1:8.9p1-3ubuntu0.10 | 1 |
| mediagis/ | d0eae7b51374 | openssh | 1:8.9p1-3ubuntu0.10 | 1 |
| moreillon/ | d2ee0423b797 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| muhammedgamal/ | 74b4cd69b6fa | openssh | 1:9.2p1-2+deb12u3 | 1 |
| nodered/ | e2632a7a35dd | openssh | 9.6_p1-r1 | 1 |
| opea/ | 2bee4eb66f3e | openssh | 1:9.2p1-2+deb12u3 | 1 |
| opea/ | 3ef121f34610 | openssh | 1:9.2p1-2+deb12u3 | 1 |
| opea/ | 7f854e9bffaf | openssh | 1:9.2p1-2+deb12u3 | 1 |
| restic/ | 579e4e6a4931 | openssh | 9.1_p1-r6 | 1 |
| sealio/ | b0389d9848a5 | openssh | 9.3_p2-r2 | 1 |
| semaphoreui/ | 5b50bc11833f | openssh | 9.3_p2-r2 | 1 |