“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

Q: How long will it take to read this news story?

The story "“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux" has 185 words across 30 sentences, which will take approximately 1 - 2 minutes for the average person to read.

Q: Which news outlet covered this story?

The story "“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux" was covered 2 days ago by Ars Technica, a news publisher based in United States.

Q: How trustworthy is 'Ars Technica' news outlet?

Ars Technica is a fully independent (privately-owned) news outlet established in 1998 that covers mostly technology news. The outlet is headquartered in United States and publishes an average of 3 news stories per day. It's most recent story was published 21 hours ago.

Q: What do people currently think of this news story?

The sentiment for this story is currently Negative, indicating that people regard this as "bad news".

Q: How do I report this news for inaccuracy?

You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.<ul><li>News ID: #21464325</li><li>URL: https://beamstart.com/news/regresshion-vulnerability-in-openssh-gives-1719951</li></ul>

Ars Technica 2d ago

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux - Ars Technica

Quick Summary:

Full system compromise possible by peppering servers with thousands of connection requests.

With thousands if not millions of vulnerable servers populating the Internet, this latest vulnerability could pose a significant risk.“This vulnerability, if exploited, could lead to full system compromise where an attacker can execute arbitrary code with the highest privileges, resulting in a complete system takeover, installation of malware, data manipulation, and the creation of backdoors for persistent access,” wrote Bharat Jogi, the senior director of threat research at Qualys, the security firm that discovered it.“It could facilitate network propagation, allowing attackers to use a compromised system as a foothold to traverse and exploit other vulnerable systems within the organization.

The vulnerability is the result of a code regression introduced in 2020 that reintroduced CVE-2006-5051, a vulnerability that was fixed in 2006.