sshole flaw lets attackers reach root on some musl-based Linux systems via long passwords
VULNERABILITYOpenSSHredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A weakness in some Linux systems could let an attacker get full control by typing a very long password of over 256 characters. It only works on a narrow set of setups, and fixed versions are now available.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update OpenSSH to version 10.6p2 or newer on any affected musl-based system.
- If you cannot update, disable password authentication and restart the SSH daemon.
- Check whether any no-password accounts on sensitive machines have recently had a password set, using the command in the researcher's writeup.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)
Who and what is in it
Products