REGRESSHION: REMOTE UNAUTHENTICATED CODE EXECUTION VULNERABILITY IN OPENSSH SERVER

Summary from the TLDR InfoSec newsletter

A vulnerability from 2006 has been reintroduced in OpenSSH. This vulnerability is caused by a signal handler race condition and could allow for unauthenticated remote code execution as root on glibc-based Linux systems. Qualys identified over 14 million potentially vulnerable internet-facing SSH servers and recommends immediate patching to prevent exploitation.