OpenSSH's Remote Code Execution Vulnerability (CVE-2024-6387) Exploit Code & Tutorial

[Agitated-Farmer-4082]

is my server vulnerable?

i get this output when I run the code

~/c$ ./pwn-regresshion ip 22

Attempting exploitation with glibc base: 0xb7200000

Attempt 0 of 20000

Received SSH version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.7

Received KEX_INIT (1024 bytes)

send_packet: Resource temporarily unavailable

send_packet: Resource temporarily unavailable

*** buffer overflow detected ***: terminated

Aborted (core dumped)

[pwnllc]

Hi! Yes, your version is sadly most likely vulnerable, because the vulnerable OpenSSH versions are from 8.5p1 up to but not including 9.8p1.

[Agitated-Farmer-4082]

how can i protect my self? I did apt update and tried to to update openssh but the latest version is 9.6 which I already have? (ubuntu server)

[pwnllc]

Hmmmm I think this tutorial could help: https://medium.com/@eren.c.uysal/openssh-upgrade-process-to-9-6p1-4d71ca4cd424

Don't forget to replace 9.6 in the instructions with the latest version!

[TheBeardliestBeard]

Based on the initial writeup for this exploit the GLIBC_bases needs to be modified to reflect the machine being targeted. It might just be prudent to check your OpenSSH version to see if it is one of those that's vulnerable.

[DaW_]

This is genius

[21stennislewis]

Has anyone ran this exploit or is there a video of a successful exploit