you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 13 hours ago (3 children)

I think they meant certificate, and are perhaps referencing the eMudhra incident?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 12 hours ago* (2 children)

    No, there was an SSH vulnerability discovered a day or two ago, which allows anyone to bypass the certificate check during authentication. So if your SSH is configured to only use a certificate, (not cert and password) then anyone can log into your shit.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 11 hours ago (1 child)

    Huh, I must have missed that one. Alpine/musl as well then? Got a ref?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 11 hours ago*

    Yes, it specifically affects the OpenSSH/Alpine/musl interaction. It’s a vulnerability in how Alpine/OpenSSH interfaces with musl, and allows anyone who can reach your SSH port to instantly log into a passwordless account by entering over 256 characters into the password field.

    The vuln is nicknamed *sshole, if you want to search it. Because it only works on passwordless accounts, (meaning it has a * in the password field). And the most common use-case for passwordless accounts is because you’re using cert-based authentication instead. Thus the warnings that if you’re using cert-only SSH, you’re most likely vulnerable.

  • source
  • parent