Shadow Project
Shadow Project Shadow: vulnerabilidades y CVE
Shadow Project Shadow tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-29383 | Baja (3.3) | 0.43% | — | 14 abr 2023 | In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n… |
| CVE-2019-19882 | Alta (7.8) | 0.52% | — | 18 dic 2019 | shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when… |
| CVE-2018-7169 | Media (5.3) | 1.6% | — | 15 feb 2018 | An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves… |
| CVE-2017-12424 | Crítica (9.8) | 2.7% | — | 4 ago 2017 | In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or… |
| CVE-2016-6252 | Alta (7.8) | 0.41% | — | 17 feb 2017 | Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. |