Security Firm: Alpine SSH Password Bypass Vulnerability Successfully Exploited

Shenchao TechFlow news, November 10: According to The Defiant, security firm GreyNoise said an SSH password authentication bypass vulnerability affecting some Alpine Linux systems has been successfully exploited.

GreyNoise said on November 6 that it is monitoring scanning, exploitation attempts, and successful exploitation activity targeting the vulnerability. Another security firm, Previdian, recorded 20 exploitation attempts from 13 different IP addresses via 4 sensors between November 6 and 8, but these observations do not prove that targets were vulnerable or that attempts were successful.

Alpine recommends that operators install the OpenSSH patch package for the corresponding version and restart the SSH service; users unable to update may disable password authentication and restart the service.

Source: Shenchao TechFlow