OpenSSH

Reported Context (2)

A high-severity vulnerability in OpenSSH can allow unauthenticated remote attackers to bypass password authentication on certain Linux systems by submitting an overlong password. OpenSSH Password-Authentication Bypass Affects Certain musl-Based Linux Systems
that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and OpenSSH 10.6p2 Fixes Critical Long-Password Authentication Bypass on Alpine Linux

CVE (2)

People (2)

MITRE ATT&CK (1)

Vendors (2)

Products (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.