That does not seem to be a good idea:
"A newly disclosed OpenSSH vulnerability dubbed "*sshole" lets attackers log in to Alpine Linux and other musl-based systems whose accounts are configured to block password authentication by submitting an oversized password, BleepingComputer reported.
Password-disabled accounts are standard hardening for root and service access, so the flaw turns a default lockdown into an entry point on affected hosts"
Login to reply
Replies (1)
It seems openwrt is using dropbear instead of openssh and therfore not affected. Can someone confirm this?