sshole flaw lets attackers reach root on some musl-based Linux systems via long passwords
VULNERABILITYOpenSSHredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researcher Özgün Kültekin disclosed the sshole flaw, which affects OpenSSH sshd on musl libc Linux systems such as Alpine. It requires sshd without PAM, password authentication enabled, at least one account with an asterisk in its password field, and another account with a valid hash. Passwords of 257 to 1,024 characters can then grant access to accounts that should not accept passwords, including root. OpenSSH 10.6p2 or newer fixes it.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update OpenSSH to version 10.6p2 or newer on any affected musl-based system.
- If you cannot update, disable password authentication and restart the SSH daemon.
- Check whether any no-password accounts on sensitive machines have recently had a password set, using the command in the researcher's writeup.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)
Who and what is in it
Products