Rapid7

vulnerability

Ubuntu: USN-5745-1 (CVE-2013-4235): shadow vulnerability

Severity
3
CVSS
(AV:L/AC:M/Au:N/C:N/I:P/A:P)
Published
Dec 3, 2019
Added
Nov 29, 2022
Modified
Apr 16, 2026

Description

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Solutions

ubuntu-pro-upgrade-loginubuntu-pro-upgrade-passwdubuntu-pro-upgrade-uidmapubuntu-upgrade-libsubid4ubuntu-upgrade-loginubuntu-upgrade-passwdubuntu-upgrade-uidmap
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.