# Are we affected by OpenSSH flaws such as regreSSHion?

Only if a server runs an affected OpenSSH version in an affected configuration, so start by finding every SSH server you have. regreSSHion (CVE-2024-6387), published in July 2024, affects the OpenSSH server on glibc-based Linux from version 8.5p1 up to, but not including, 9.8p1, as well as very old releases before 4.4p1; other flaws have other ranges, so read each advisory. List your servers from your inventory and from the network, including appliances, containers and forgotten test machines. Check the installed package against your distribution's security tracker, because distributions often backport fixes without changing the version number, then patch, or restrict access until you can. From the Pro plan, the NQCI cryptographic inventory, in preview, lists every SSH server whose version banner it has seen, with the version announced; it needs packet capture, switched on for a Linux agent or a SPAN/TAP sensor. A banner is a hint, not a verdict, so confirm on the server.

FAQ: [Remote work and exposed services](https://netsenx.com/en/faq/remote) · https://netsenx.com/en/faq/are-we-affected-by-openssh-flaws-like-regresshion

## Read next

- https://netsenx.com/en/blog/2026-11-06_sshole-cve-2026-123158
- https://netsenx.com/en/encrypted-traffic-analysis

## Related questions

- [Can malware travel back to my computer over an SSH session?](https://netsenx.com/en/faq/can-malware-travel-back-over-an-ssh-session)
- [How can SSH tunnels bypass a firewall?](https://netsenx.com/en/faq/how-can-ssh-tunnels-bypass-a-firewall)
- [Is it safe to use SSH over public Wi-Fi?](https://netsenx.com/en/faq/is-ssh-over-public-wifi-safe)
- [How dangerous is port forwarding to a server in the office?](https://netsenx.com/en/faq/how-dangerous-is-port-forwarding-for-an-office-server)
- [How do I check what our company exposes to the internet?](https://netsenx.com/en/faq/how-to-check-what-our-company-exposes-to-the-internet)