Are you sure? The text implies that the unsafe path is getting interrupted while... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		gcr on July 1, 2024 \| parent \| context \| favorite \| on: OpenSSH Race condition resulting in potential remo... Are you sure? The text implies that the unsafe path is getting interrupted while parsing a DSA key, which presumably occurs before authentication?

b112 on July 1, 2024 [–]

Indeed, remote root is possible.

https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion....

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact