Security researchers have disclosed a serious authentication issue affecting certain Alpine Linux systems that combine OpenSSH with the musl C library. Under specific account configurations, an attacker who can reach the SSH service may be able to sign in without knowing a password.
The flaw does not affect every Linux computer. It depends on how authentication is configured, including the absence of PAM and particular password and account settings. Similar configurations on other systems could also be exposed.
Updates have been released by Alpine and OpenSSH. Administrators using those components should check whether their systems meet the affected conditions and apply the relevant fixes promptly, especially when SSH can be reached from the internet.
0 comments:
Post a Comment