WORLDTECHHackers actively exploit Linux flaw that allows SSH access to privileged accounts
Hackers are actively exploiting a recently discovered critical vulnerability that lets them log in to privileged accounts on many Linux systems, according to multiple researchers reported by one outlet.
Flaw stems from OpenSSH and musl interaction
The vulnerability, tracked under the name *sshole, comes from the way OpenSSH, the client and server implementation of the Secure Shell protocol, works together with a code library called musl.
Linux systems that run both packages and meet certain other conditions can be taken over to gain unauthenticated access to high-privilege accounts within seconds, according to the report.
Concern over possible widespread compromise
The flaw became publicly known last Thursday and quickly raised fears that Linux machines could be compromised on a large scale.
The reporting describes *sshole as a serious threat to Internet security.
Open questions
- How many systems meet the conditions needed for exposure?
- Has a patch or mitigation been released for affected OpenSSH and musl setups?