Get root on a musl Linux system by slamming it with an overly long password
ID: 854c3fab-157c-563f-aa87-40a413d69c30
STIX ID: report--854c3fab-157c-563f-aa87-40a413d69c30
Feed Name: The Register (Security)
Threat Score
A musl-libc-related OpenSSH vulnerability (nicknamed "sshole") allows authentication to accounts with an asterisk in their password field by submitting overly long passwords (257–1024 bytes) under specific conditions (musl libc, OpenSSH without PAM, password auth enabled, and at least one other account with a valid password hash). The flaw stems from musl's crypt()/password-length handling; OpenSSH 10.6p2 fixes the issue, and disabling password authentication is an effective workaround.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.