Summary
It was discovered that shadow incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
expose sensitive information. This issue only affected
Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2017-12424)
It was discovered that shadow incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2018-7169)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | shadow | 1:4.5-1ubuntu2.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | shadow | 1:4.1.5.1-1ubuntu9.5+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | shadow | 1:4.2-3.1ubuntu5.5+esm1 |
Vulnerabilities 2
-
Unscored —
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the …
-
Unscored —
An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be plac…