{"id":184154,"date":"2026-11-05T23:41:11","date_gmt":"2026-11-05T21:41:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/sshole-uyazvimost-pozvolyayushhaya-podklyuchitsya-po-ssh-bez-parolya-v-sistemah-s-musl"},"modified":"2026-11-05T23:41:15","modified_gmt":"2026-11-05T21:41:15","slug":"sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","title":{"rendered":"SSHole \u2014 ievainojam\u012bba, kas \u013cauj piesl\u0113gties, izmantojot SSH bez paroles, sist\u0113m\u0101s ar Musl","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH izstr\u0101d\u0101t\u0101ji ir public\u0113ju\u0161i steidzamu atjaunin\u0101jumu OpenSSH 10.6p2, kur\u0101 ir pievienota aizsardz\u012bba pret kritisku ievainojam\u012bbu (CVE nav pie\u0161\u0137irts), kas ieguva nosaukumu \"SSHole\" un \u013cauj apiet autentifik\u0101ciju. Sist\u0113m\u0101s ar Musl bibliot\u0113ku ievainojam\u012bba \u013cauj piesl\u0113gties lietot\u0101jam, kuram nav iestat\u012bta parole, ievadot jebkuru paroli, kas satur vair\u0101k nek\u0101 256 simbolus. Probl\u0113ma skar Linux distrib\u016bcijas, kas izmanto standarta musl bibliot\u0113ku, bet neizmanto PAM (Pluggable Authentication Modules), piem\u0113ram, OpenWRT, Alpine, Buildroot un Yocto. \u012apa\u0161u apdraud\u0113jumu rada tas, ka bie\u017ei piek\u013cuve ar paroli ir blo\u0137\u0113ta root lietot\u0101jam, \u013caujot ikvienam att\u0101lin\u0101ti piesl\u0113gties ar administratora ties\u012bb\u0101m.<\/p>\n

K\u013c\u016bda, kas izraisa ievainojam\u012bbu, nav OpenSSH kod\u0101, bet to izmanto, manipul\u0113jot ar sshd. \u0145emot v\u0113r\u0101 probl\u0113mas nopietn\u012bbu, OpenSSH 10.6p2 versij\u0101 ir pied\u0101v\u0101ts apiet ievainojam\u012bbu. Sist\u0113mu \u012bpa\u0161niekiem, kas ir pak\u013cauti \u0161ai probl\u0113mai, ieteicams uzreiz atsl\u0113gt paroli autentifik\u0101ciju, izmantojot parametru \"PasswordAuthentication no\" fail\u0101 \/etc\/ssh\/sshd_config vai piln\u012bb\u0101 atsl\u0113gt SSH. <\/p>\n

Probl\u0113ma neizpau\u017eas sist\u0113m\u0101s, kas nav Linux, un Linux vid\u0113s, kas balst\u012btas uz glibc, k\u0101 ar\u012b sist\u0113m\u0101s, kas izmanto PAM paroles autentifik\u0101cijai. Labojums jau pieejams Alpine un OpenWRT.<\/p>\n

Ievainojam\u012bba ir saist\u012bta ar nepareizu OpenSSH un funkcijas crypt() no musl mijiedarb\u012bbu. Lai pasarg\u0101tu no eso\u0161o lietot\u0101ju noteik\u0161anas, analiz\u0113jot at\u0161\u0137ir\u012bbas piepras\u012bjumu apstr\u0101des laik\u0101, kop\u0161 2016. gada OpenSSH, p\u0101rbaudot bezparole kontus, izmanto standarta paroli p\u0101rbaudes proced\u016bru: t\u0101 izsauc funkciju \"crypt(padot\u0101 parole, s\u0101ls)\" ar citu lietot\u0101ju s\u0101li, kuram ir der\u012bgais parolu hashes, p\u0113c tam sal\u012bdzina ar funkcijas crypt atgriezto hash v\u0113rt\u012bbu no lauka ar parolu hash.<\/p>\n

Tom\u0113r musl funkcija crypt() SHA-512 hashiem atgrie\u017e simbolu \"*\", ja padot\u0101s paroles garums p\u0101rsniedz 256 baitus (ierobe\u017eojums tika ieviests 2012. gad\u0101, lai aizsarg\u0101tu pret DoS uzbrukumiem, jo l\u012bdz ar lielu v\u0113rt\u012bbu p\u0101rs\u016bt\u012b\u0161anu tiek rad\u012bta liela slodze uz CPU). Tas pats simbols tiek izmantots lauka ar parolu hash \"\/etc\/shadow\" lai nor\u0101d\u012btu uz kontiem, kuriem ir blo\u0137\u0113ta paroli autentifik\u0101cija. <\/p>\n

Rezult\u0101t\u0101 uzbruc\u0113js, kuram ir piek\u013cuve SSH serverim, var piesl\u0113gties jebkurai kontam, kuram fail\u0101 \u00ab\/etc\/shadow\u00bb paroles lauk\u0101 ir nor\u0101d\u012bts simbols \u00ab*\u00bb, nos\u016btot virkni no 257 l\u012bdz 1024 baitu garum\u0101. Probl\u0113ma skar daudzas eso\u0161as Docker att\u0113lu, kas ir izveidoti, izmantojot Alpine Linux, k\u0101 ar\u012b standarta Alpine att\u0113lus m\u0101kon\u012b AWS un Azure, kur lietot\u0101jam root viet\u0101 paroli hash ir nor\u0101d\u012bts simbols \u00ab*\u00bb. <\/p>\n

Iev\u0113r\u012bbas cien\u012bgs ir fakts, ka s\u0101kotn\u0113ji ofici\u0101lajos Docker att\u0113los, kas izmanto Alpine, kop\u0161 2015. gada bija nor\u0101d\u012bta tuk\u0161a root parole, bet p\u0113c tam, kad \u0161is fakts tika atkl\u0101ts, paroli hash viet\u0101 tika nor\u0101d\u012bts simbols \u00ab!\u00bb. Ta\u010du t\u0101s kl\u0101tb\u016btne blo\u0137\u0113ja piesl\u0113g\u0161anos ar SSH atsl\u0113g\u0101m, t\u0101p\u0113c kop\u0161 2022. gada simbols, lai blo\u0137\u0113tu piesl\u0113g\u0161anos ar paroli, tika aizst\u0101ts ar simbolu \u00ab*\u00bb.
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSH 10.6p2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «SSHole» \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Musl \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u0432\u0435\u0434\u044f \u043b\u044e\u0431\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c 256 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184154","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SSHole \u2014 ievainojam\u012bba, kas \u013cauj piesl\u0113gties pa SSH bez paroles sist\u0113m\u0101s ar Musl | ProHoster","description":"OpenSSH izstr\u0101d\u0101t\u0101ji public\u0113ja steidzamu atjaunin\u0101jumu OpenSSH 10.6p2, kur\u0101 pievienota aizsardz\u012bba pret kritisku ievainojam\u012bbu (CVE nav pie\u0161\u0137irts), kurai bija kodv\u0101rds \"SSHole\" un kas \u013cauj apiet autentifik\u0101ciju.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SSHole \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e SSH \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 Musl | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSH 10.6p2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f "SSHole" \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-05T21:41:11+00:00","article:modified_time":"2026-11-05T21:41:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=184154"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184154\/revisions"}],"predecessor-version":[{"id":184155,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184154\/revisions\/184155"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=184154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=184154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=184154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}