{"id":184154,"date":"2026-11-05T23:41:11","date_gmt":"2026-11-05T21:41:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/sshole-uyazvimost-pozvolyayushhaya-podklyuchitsya-po-ssh-bez-parolya-v-sistemah-s-musl"},"modified":"2026-11-05T23:41:15","modified_gmt":"2026-11-05T21:41:15","slug":"sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","title":{"rendered":"SSHole \u2014 o vulnerabilitate care permite conectarea prin SSH f\u0103r\u0103 parol\u0103 \u00een sistemele cu Musl","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii OpenSSH au publicat o actualizare de urgen\u021b\u0103 pentru OpenSSH 10.6p2, care ofer\u0103 protec\u021bie \u00eempotriva unei vulnerabilit\u0103\u021bi critice (CVE nu este atribuit), cunoscut\u0103 sub numele de «SSHole», ce permite ocolirea autentific\u0103rii. \u00cen sistemele cu biblioteca Musl, vulnerabilitatea permite conectarea la un utilizator pentru care nu este setat un parol\u0103, introduc\u00e2nd o parol\u0103 care con\u021bine mai mult de 256 de caractere. Problema afecteaz\u0103 distribu\u021biile Linux care utilizeaz\u0103 biblioteca standard musl, dar nu folosesc PAM (Pluggable Authentication Modules), cum ar fi OpenWRT, Alpine, Buildroot \u0219i Yocto. O amenin\u021bare deosebit\u0103 este c\u0103 adesea autentificarea prin parol\u0103 este blocat\u0103 pentru utilizatorul root, permi\u021b\u00e2nd oricui s\u0103 se conecteze de la distan\u021b\u0103 cu privilegii de administrator.<\/p>\n

Eroarea care duce la vulnerabilitate nu se afl\u0103 \u00een codul OpenSSH, ci este exploatat\u0103 prin sshd. Datorit\u0103 gravit\u0103\u021bii problemei, \u00een versiunea OpenSSH 10.6p2 a fost propus\u0103 o solu\u021bie temporar\u0103 pentru blocarea vulnerabilit\u0103\u021bii. Proprietarilor sistemelor afectate le este recomandat s\u0103 nu a\u0219tepte apari\u021bia actualiz\u0103rilor, ci s\u0103 dezactiveze imediat autentificarea prin parol\u0103 prin parametru «PasswordAuthentication no» \u00een \/etc\/ssh\/sshd_config sau s\u0103 dezactiveze complet SSH. <\/p>\n

Problema nu se manifest\u0103 \u00een sisteme diferite de Linux \u0219i \u00een medii Linux bazate pe glibc, precum \u0219i \u00een sistemele care utilizeaz\u0103 PAM pentru autentificarea prin parol\u0103. O corectare este deja disponibil\u0103 \u00een Alpine \u0219i OpenWRT.<\/p>\n

Vulnerabilitatea este legat\u0103 de interac\u021biunea incorect\u0103 dintre OpenSSH \u0219i func\u021bia crypt() din musl. Pentru a se proteja de determinarea existen\u021bei utilizatorilor prin analiza diferen\u021belor \u00een timp de procesare a cererilor, din 2016 OpenSSH utilizeaz\u0103 procedurele standard de verificare a parolei la verificarea conturilor f\u0103r\u0103 parol\u0103: apeleaz\u0103 func\u021bia «crypt(parola trimis\u0103, sare)» cu sarea altui utilizator care are un hash valid al parolei, apoi compar\u0103 hash-ul returnat de func\u021bia crypt cu valoarea din c\u00e2mpul cu hash-ul parolei.<\/p>\n

Cu toate acestea, \u00een musl, func\u021bia crypt() pentru hash-urile SHA-512 returneaz\u0103 caracterul «*», dac\u0103 lungimea parolei trimise dep\u0103\u0219e\u0219te 256 de octe\u021bi (limitare introdus\u0103 \u00een 2012 pentru a proteja \u00eempotriva atacurilor DoS, deoarece transmiterea de valori mari genereaz\u0103 o sarcin\u0103 mare pe CPU). Acela\u0219i caracter este folosit \u00een c\u00e2mpul cu hash-ul parolei din «\/etc\/shadow» pentru a indica conturile pentru care autentificarea prin parol\u0103 este blocat\u0103. <\/p>\n

Ca urmare a atacului, un agresor care are acces la un server SSH poate s\u0103 se conecteze la orice cont care are \u00een «\\\/etc\\\/shadow» un simbol «*» \u00een c\u00e2mpul parolei, trimi\u021b\u00e2nd un \u0219ir cu o lungime \u00eentre 257 \u0219i 1024 de bytes. Problema afecteaz\u0103 numeroase imagini Docker existente, construite folosind Alpine Linux, precum \u0219i imaginile standard Alpine pentru sistemele cloud AWS \u0219i Azure, \u00een care pentru utilizatorul root, \u00een loc de hash-ul parolei, a fost stabilit simbolul «*». <\/p>\n

Este remarcabil c\u0103, ini\u021bial, \u00een imaginile oficiale Docker care folosesc Alpine, din 2015, a fost setat\u0103 o parol\u0103 goal\u0103 pentru root, iar dup\u0103 ce s-a descoperit acest fapt, \u00een loc de hash-ul parolei, a fost setat simbolul «!». Totu\u0219i, prezen\u021ba acestuia bloca autentificarea prin chei SSH, astfel c\u0103, \u00eencep\u00e2nd cu 2022, simbolul pentru blocarea autentific\u0103rii prin parol\u0103 a fost \u00eenlocuit cu «*».
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSH 10.6p2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «SSHole» \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Musl \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u0432\u0435\u0434\u044f \u043b\u044e\u0431\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c 256 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184154","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SSHole \u2014 o vulnerabilitate care permite conectarea prin SSH f\u0103r\u0103 parol\u0103 \u00een sistemele cu Musl | ProHoster","description":"Dezvoltatorii OpenSSH au publicat o actualizare de urgen\u021b\u0103 pentru OpenSSH 10.6p2, care include protec\u021bie \u00eempotriva unei vulnerabilit\u0103\u021bi critice (CVE neatribuit), cunoscut\u0103 sub numele de \"SSHole\", care permite eludarea autentific\u0103rii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SSHole \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e SSH \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 Musl | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSH 10.6p2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f "SSHole" \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/sshole-vulnerability-allows-passwordless-ssh-access-on-musl-based-systems","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-05T21:41:11+00:00","article:modified_time":"2026-11-05T21:41:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184154"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184154\/revisions"}],"predecessor-version":[{"id":184155,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184154\/revisions\/184155"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}