Threats tagged 'ghsa-4fcc-vm97-gx3x'

OpenSSH versions before 10.6p2 on Linux systems using musl libc without PAM are vulnerable to a password authentication bypass. This flaw arises from a misinterpretation of whether a string is a password hash, allowing passwords between 256 and 1024 characters to succeed improperly. Alpine Linux is an example of a platform affected by this issue.