SSHole Vulnerability: Is Your Alpine Server Safe?
OpenSSH has a bug on musl libc allowing long passwords to bypass locked accounts. Systems like Alpine and OpenWrt using musl are potentially vulnerable by default. An official fix is available, or disabling password login mitigates the risk.
Choose the option closest to your current judgment.
Known and confirmed
- OpenSSH has a bug on musl libc allowing long passwords to bypass locked accounts.
- Systems like Alpine and OpenWrt using musl are potentially vulnerable by default.
- An official fix is available, or disabling password login mitigates the risk.
Unknown or unverified
- 用户是否正在运行受影响的musl环境且未使用PAM。
- 部分旧设备或特殊嵌入式系统升级OpenSSH的可行性。
Original sources
1 sourcesYour choice
Take a stand alongside AI
Which strategy do you prefer to address this vulnerability?
Comparison standard: Choose the option closest to your current judgment.