'Critical' vulnerability in OpenSSH uncovered, affects almost all Linux systems

14 million internet-facing servers are vulnerable, says Qualys

John Leonard
clock • 2 min read
Researchers uncover 'critical' vulnerability in OpenSSH, affects almost all Linux systems
Image:

Researchers uncover 'critical' vulnerability in OpenSSH, affects almost all Linux systems

Researchers at the Qualys Threat Research Unit (TRU) have unearthed discovered a critical security flaw in OpenSSH's server (sshd) in glibc-based Linux systems.

They have named this vulnerability "regreSSHion", since it represents the re-emergence of a bug that was previously patched in 2006 (CVE-2006-5051). It is described as "critical". The new vulner...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

You may also like
CISA warns about unsafe open source projects

Open Source

'Most' projects are open memory corruption security flaws

clock 28 June 2024 • 3 min read
Windows users warned of wireless takeover vulnerability

Threats and Risks

Users are advised to update immediately

clock 17 June 2024 • 2 min read
Cloud encryption rates are disastrously low, research

Security

Come on in, the door's open

clock 05 June 2024 • 2 min read

More on Threats and Risks

Intel processors threatened by new CPU side channel attack

Intel processors threatened by new CPU side channel attack

Exploits weaknesses in two key components

clock 03 July 2024 • 2 min read
CocoaPods: Almost every Apple device vulnerable to flaws in dependency manager

CocoaPods: Almost every Apple device vulnerable to flaws in dependency manager

Flaws were patched last October, having existed for 9 years

John Leonard
clock 02 July 2024 • 3 min read
Labour plans to make tech giants liable for reimbursing victims of online fraud, report

Labour plans to make tech giants liable for reimbursing victims of online fraud, report

Banks have said it's unfair they should bear burden of crimes propagated through tech platforms

clock 30 June 2024 • 3 min read