A newly disclosed OpenSSH vulnerability dubbed “*sshole” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/
