Get the latest tech news
'Critical' vulnerability in OpenSSH uncovered, affects almost all Linux systems
Researchers at the Qualys Threat Research Unit (TRU) have unearthed discovered a critical security flaw in OpenSSH's server (sshd) in glibc-based Linux systems.
The vulnerability is "a signal handler race condition in OpenSSH's server (sshd)", according to Bharat Jogi, senior director at Qualys TRU, in a post on the company's website. Nevertheless, the researchers say, given the risk posed by regreSHHion, organisations should take immediate measures to locate and secure vulnerable systems applying patches, reconfiguring sshd and segmenting networks, where possible. Using the Censys and Shodan search engines, TRU researchers identified over 14 million potentially vulnerable OpenSSH server instances exposed to the internet.
Or read this on r/technology