[gcr]

Are you sure? The text implies that the unsafe path is getting interrupted while parsing a DSA key, which presumably occurs before authentication?

[b112]

Indeed, remote root is possible.

https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion....