CERT24OpenSSH flaw lets attackers log into password-disabled Linux accountsLoading data…
CERT24Threat Observatory
Period

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A flaw in OpenSSH and the musl C library allows attackers to log into certain musl-based Linux accounts configured to block password authentication by submitting an oversized password.

← Back to intelligence

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A flaw in OpenSSH and the musl C library allows attackers to log into certain musl-based Linux accounts configured to block password authentication by submitting an oversized password.