OpenSSH flaw lets attackers log into password-disabled Linux accounts
Summary
A newly disclosed vulnerability in OpenSSH, nicknamed '*sshole', allows attackers to bypass password authentication on certain Linux systems, including Alpine Linux, by submitting an excessively long password. This flaw enables unauthorized access to accounts that are otherwise configured to disallow password logins.
IFF Assessment
This vulnerability allows unauthorized access to systems, posing a direct threat to defenders by enabling attackers to compromise accounts.
Severity
The vulnerability allows for network-based exploitation (AV:N) with low complexity (AC:L) and no privileges required (PR:N), impacting confidentiality, integrity, and availability (C:H, I:H, A:H). The ease of exploitation and high impact contribute to a critical CVSS score.
Defender Context
This vulnerability presents a significant risk to systems using musl-based Linux distributions and OpenSSH configurations that disable password authentication. Defenders should prioritize patching OpenSSH or implementing alternative authentication methods to mitigate the risk of unauthorized access.