On Alpine Linux and other musl-based systems running sshd without PAM, a password-handling bug lets certain accounts log in with any password 256 to 1024 characters long.