shadow-maint

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

shadow-maint records in CISA KEV

No shadow-maint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shadow-utils 1 record LOW

Records

2 records

TI-2023-04278 CVE-2023-4641 · GHSA-6ggv-mmg2-jf4r

Shadow-utils: possible password leak during passwd(1) change

LOW 26

A flaw was found in shadow-utils.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00256 Published 2023-12-27 Partial fix · 4.14.0-rc1, 2:4.6-19.el8 +3 CWE-303

TI-2024-37351 CVE-2024-56433 · GHSA-7683-vm2j-m4cc

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior…

LOW 18

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00426 Published 2024-12-26 Partial fix CWE-1188

Open these records in search →

Critical	0
High	0
Medium	1
Low	1
No CVSS	0