CVE-2017-17878

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Valve Steam Link build 643 where root passwords longer than 8 characters are truncated due to the default use of the DES algorithm.

Risk Assessment

Organizations may be at risk as long passwords are improperly handled, potentially leading to easier access to the system.

Recommendation

It is recommended to change the password algorithm setting to a more secure option to avoid issues with password truncation.

Original NVD description (English source)

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="des" setting).