SSHHole: OpenSSH allows any password over 256 characters on musl systems
Original title: Risky Bulletin: Some OpenSSH instances take any password longer than 256 characters
Bypass authentication in OpenSSH musl versions with any string longer than 256 characters, affecting Alpine, OpenWRT and IoT devices.
A vulnerability in OpenSSH permits logins using any password exceeding 256 characters on musl libc-based systems. This includes Alpine Linux, OpenWRT, BuildRoot, and Yocto. Patches have been released, but deployment in routers and cloud environments remains a concern.
Unconfirmed: Exact number of affected instances in production unknown
- Affects all OpenSSH musl versions from the past decade
- Any random string over 256 characters bypasses authentication
- Works on disabled password accounts and key-based logins
- Impacts Alpine Linux, OpenWRT, BuildRoot, and Yocto
- Patches released within one day of discovery
Impact: Unauthenticated access as root using any password >256 chars
- 1.Upgrade OpenSSH to patched version on musl systems
- 2.Update Alpine Linux and OpenWRT firmware
- 3.Review router and IoT device firmware
- Vendors
- OpenSSH
- Organizations
- Risky Business
From the original article
14 min read at news.risky.biz
In other news: Fridge hacks also went after French blood banks; French bank hacked for $133 million; Thai opposition targeted with spyware.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.