TLDR · PROGRAMMING, DESIGN & DATA SCIENCE

MEET *SSHOLE, THE VULNERABILITY THAT LETS HACKERS SSH INTO LINUX DEVICES

arstechnica.com3 min read

Summary from the TLDR newsletter

*sshole is a vulnerability in Linux that allows attackers to log in via SSH without knowing the password. The vulnerability exists in systems using OpenSSH with musl without pluggable authentication modules. Despite the prerequisites, the vulnerabilities likely threaten a large number of systems. It is still unclear where the vulnerability resides and what other packages may be vulnerable.