Hello everyone!
New security bulletin published by IBM [CVE-2024-6387].
OpenSSH used by IBM i could allow a remote attacker to execute arbitrary code on the system.
This stems from a signal handler race condition that has been incorrectly programmed.
By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with root privileges on glibc-based Linux systems.
The CVSS score for this vulnerability is a basic 8.1, making it of the utmost importance. We therefore strongly advise you to apply PTF SJ01687 (attachment).
Note that this vulnerability seems to be present only on V.5 machines.
For more details on the Security Alert, please visit the official IBM support site: https: //lnkd.in/eJTjs35z
