sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.
| Vendor | Product | Versions |
|---|---|---|
| openssh | openssh | 0 |
Loading…
Updated severity from HIGH to CRITICAL, added technical detail about the '*' password hash field exploitation mechanism, added CWE-208 for timing attack concerns, and added timing-attack and side-channel tags.
Updated severity from HIGH to CRITICAL, CVSS from 8.1 to 9.8, marked exploitAvailable as true, significantly expanded description with technical details about root cause chain, and added SSHole nickname and relevant tags.
Initial creation
