[ssh_x509] logging in signal handler with GNU C library

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Sat Jul 6 11:14:21 EEST 2024


Hello,


Related to OpenSSH CVE-2024-6387.

With commit "in alarm handler do not send alarm to "preauth" child" 
PKIX-SSH 13.3.2 enables logging in signal handler on all OS-es. Before 
it was only on OpenBSD. Unfortunately this still cannot be considered 
secure on system with GNU C library. It is demonstrated code execution 
on 32-bit Linux/glibc.

In master branch commit "disable again log in sigdie()" restores 
previous state.
Manual correction is open log.c, find function sshsigdie and change 
preprocessor directive from "#if 1" to "#if 0".


Regards
Roumen




More information about the ssh_x509 mailing list