Techly NewsGet the app

Get the latest tech news

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts


A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes. "Apparently certain varieties of musl Linux (Alpine, OpenWrt, Buildroot, Yocto, etc.) have had this O...

None

Get the Android app

Or read this on Slashdot

Read more on:

Photo of Password

Password

Photo of attackers

attackers

Photo of openssh flaw

openssh flaw

Related news:

News photo

Combined OpenSSH and musl-libc flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password

News photo

OpenSSH flaw lets attackers log into password-disabled Linux accounts

News photo

A device in the White House is apparently using an unsafe proxy — which attackers could use it 'to reach internal systems'

« The White House is apparently a popular residential proxy exit spot
AMDGPU Driver Seeing HDMI 2.2 FRL Fixes For Linux 7.4 »