ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2025.1236
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-1236)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'openssh' package(s) announced via the EulerOS-SA-2025-1236 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'openssh' package(s) announced via the EulerOS-SA-2025-1236 advisory. Vulnerability Insight: A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). As a consequence of a successful attack, in the worst case scenario, an attacker may be able to perform a remote code execution (RCE) as an unprivileged user running the sshd server.(CVE-2024-6409) Affected Software/OS: 'openssh' package(s) on Huawei EulerOS V2.0SP10. Solution: Please install the updated package(s). CVSS Score: 6.6 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-6409
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.