OpenSSH flaw lets oversized passwords log into password-disabled musl accounts
VulnerabilitiesCVE-2016-6210CVSS 5.92 min read
A researcher says the bug has been in OpenSSH since 2016 and only bites on musl-based systems with password auth on and PAM off. It's fixed in OpenSSH 10.6p2.