Skip to content
securitytabs

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

The Hacker NewsVulnerabilitiesIdentityEndpoint

MentionsOpenSSH

Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long. OpenSSH, which rates the flaw critical, released version 10.6p2 today to block it. Alpine has published fixed packages for every

Summary from The Hacker News.

Read the full article at The Hacker News
Full story3 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated 3h agoOpenSSH releases emergency fix for login bypass on Alpine and other musl-based Linux

Explained

The technology and terms in this story. Learn more

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities