As cited
Copy frozen at (site build).
vulnerabilities
OpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH vulnerability allows attackers to log into Alpine Linux and other musl-based systems where password authentication is disabled by submitting an oversized password. The flaw, dubbed "*sshole," affects accounts configured to reject password logins. This undermines a common security configuration intended to enforce alternative authentication methods.
Why it matters: Linux system administrators running Alpine Linux or musl-based distributions with password authentication disabled need to patch immediately, as the vulnerability allows unauthorized login despite protective account settings.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
OpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH vulnerability allows attackers to log into Alpine Linux and other musl-based systems where password authentication is disabled by submitting an oversized password. The flaw, dubbed "*sshole," affects accounts configured to reject password logins. This undermines a common security configuration intended to enforce alternative authentication methods.
Why it matters: Linux system administrators running Alpine Linux or musl-based distributions with password authentication disabled need to patch immediately, as the vulnerability allows unauthorized login despite protective account settings.
- Source published
- First seen by Cybersecurity Tracker