CVE-2024-6387

nuclei template for CVE-2024-6387 OpenSSH Race Condition RCE

id: CVE-2024-6378

info:
  name: Regression Detect
  author: Redflare Cyber
  severity: high
  description: Regression
  classification:
    cve-id: CVE-2024-6378
  metadata:
    max-request: 2
    vendor: OpenSSH
    product: OpenSSH
  tags: cve,cve2024,regression,openssh,ssh

tcp:
  - host:
      - '{{Hostname}}'
      - '{{Host}}:22'

    inputs:
      - data: "SSH-2.0-OpenSSH_9.0\r\n"

    matchers:
      - type: regex
        part: body
        regex:
          - 'OpenSSH_(8\.[5-9]p?[12]?|9\.[0-7]p?[12]?|[0-3]\.[0-9]p?[12]?|4\.[0-3]p?[12]?)'
      - type: status
        status:
          - 200

Last updated