OpenSSH rushes patches for 'SSHole' authentication bypass
VULNERABILITYOpenSSHredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
OpenSSH is releasing patches for an authentication bypass dubbed 'SSHole'. On Linux distributions that use musl libc without PAM, some accounts accept any password between 257 and 1024 characters.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether your Linux systems use musl libc without PAM.
- Apply the OpenSSH patch from your Linux distribution as soon as it is released.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
SecurityWeek