Reports describe a long-password flaw involving OpenSSH and musl

Technology · First reported 5 Nov, 18:14 · Updated 18:43

Image: Wikimedia Commons · NASA Johnson Space Center · Public domain

Two reports describe a security issue involving OpenSSH and musl-based Linux systems. One says a password longer than 256 characters could enable access; the other calls the OpenSSH vulnerability decade-old and says it has been fixed.

Tom’s Hardware says combined OpenSSH and musl-libc flaws could let someone access Alpine Linux and other distributions by entering a password longer than 256 characters.
The Register describes gaining root access on a musl Linux system with an overly long password.
The Register says the OpenSSH vulnerability is decade-old and now fixed.

Summary written by Lux AI from 2 articles

Key facts

Password length cited: More than 256 characters
Systems named: Alpine Linux and other distributions; musl Linux
Fix status reported: The Register says the OpenSSH vulnerability is now fixed