Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade shadow | Aug 30, 2017 | Feb 17, 2017 |
| Debian | — | Upgrade shadow | Feb 25, 2017 | Feb 17, 2017 |
| Gentoo Linux | — | Upgrade sys-apps/shadow. | Oct 30, 2017 | Feb 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade shadow-utils | Dec 4, 2019 | Feb 17, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade shadow-utils | Dec 18, 2019 | Feb 17, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade shadow-utils | Nov 19, 2019 | Feb 17, 2017 |
| Suse | — | Upgrade shadow | Jul 20, 2018 | Feb 17, 2017 |
| Ubuntu | — | Upgrade loginUpgrade passwdUpgrade uidmap | May 5, 2017 | Feb 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub