Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Summary
Security researchers report that a severe security flaw affecting multiple Linux systems is currently being exploited by attackers. The vulnerability stems from how OpenSSH and a specific code library interact under certain conditions, granting unauthorized remote access to privileged accounts.
Hackers are actively exploiting a recently discovered critical vulnerability that allows them to log in to privileged accounts on many Linux systems, multiple researchers are reporting. The vulnerability, tracked under the name *sshole, arises from the interaction between OpenSSH and a code library known as musl. Linux systems that use both of these packages and meet certain other requirements can…
Source: Read the full story at Ars Technica - All content