Package · Azure Linux

shadow-utils

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Low 3.6

CVE-2024-56433 Public exploit

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 16553…

shadow-maint shadow-utils shadow shadow Debian Ubuntu Azure Linux

Dec 26, 2024
Medium 4.7

CVE-2023-4641

Shadow-utils: possible password leak during passwd(1) change

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enoug…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Dec 27, 2023
Unscored —

CVE-2023-29383

In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finge…

shadow shadow shadow shadow-utils Debian Ubuntu Azure Linux Alpine

Apr 14, 2023