3 ms·
Depends on the set of global resources, including development, CI/CD and production systems, reachable by compromised sshd.
by transpute 3y ago
Depends on the set of global resources, including development, CI/CD and production systems, reachable by compromised sshd.
- kelnos 3y agoAnd that would likely be precious few, at least today. Only a teeny tiny percentage of servers out there were updated to a vulnerable version. And an even smaller percentage likely had their sshd port exposed to the public internet. Sure, if the backdoor hadn't been found for a couple more years, the impact would have been much higher, as the backdoored version would have made it into actual current releases of the popular server distros, and companies gradually upgraded.