From TokenPost · · 40s
OpenSSH Password Bypass Affects Alpine Linux
Attackers exploit OpenSSH password bypass on Alpine Linux systems.
In brief
Attackers exploit OpenSSH password bypass on Alpine Linux systems. Attackers exploit OpenSSH password-authentication bypass affecting Alpine Linux and musl-based systems, requiring immediate patching or disabling password logins. Originally reported by TokenPost.
Security Vulnerability
Attackers are exploiting an OpenSSH password-authentication bypass affecting Alpine Linux and some other systems built on musl.
Observed Exploitation
Successful exploitation has been observed, with 20 attempts logged and evidence of both attempts and successful use.
Mitigation Options
Alpine operators can install the patch and restart SSH or disable password authentication to address the password-login exposure.
The big picture
Attackers exploit OpenSSH password-authentication bypass affecting Alpine Linux and musl-based systems, requiring immediate patching or disabling password logins.
