# MA-1121.082024: MyCERT Advisory - OpenSSH Pre-Authentication Vulnerability in FreeBSD

**Date:** 13 Aug 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1121.082024  
**Advisory ID:** MA-1121.082024

---

**1.0 Introduction**
Recently, a critical security vulnerability has been discovered in OpenSSH implementations on FreeBSD systems. This vulnerability identified as CVE-2024-7589 OpenSSH Pre-Authentication Async Signal Safety Issue.
**2.0 Impact**
This vulnerability could allow a determined attacker to execute arbitrary code remotely with root privileges, potentially compromising the entire system.
**3.0 Affected Products**
- FreeBSD OS 14.0
- FreeBSD OS 14.1
- FreeBSD OS 13.3
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the FreeBSD release and apply the necessary updates.
Kindly refer to the following URL: 
- <https://www.freebsd.org/security/advisories/FreeBSD-SA-24:08.openssh.asc>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0    References**
- <https://www.freebsd.org/security/advisories/FreeBSD-SA-24:08.openssh.asc>
- <https://www.cve.org/CVERecord?id=CVE-2024-7589>