Musl password flaw hands over root access
A decade-old OpenSSH quirk in musl-based Linux systems lets long passwords bypass asterisk-locked accounts, and a fix is out.
3 results for “alpine”
A decade-old OpenSSH quirk in musl-based Linux systems lets long passwords bypass asterisk-locked accounts, and a fix is out.
A flaw in OpenSSH on musl-based Linux lets attackers log into password-disabled accounts with an oversized password, researcher says.
Alpine Linux rebuilt its GitLab server and reset passwords after attackers tried to exploit a maximum-severity flaw and it could not rule out code execution.