Login Request a demo
SH
Product
Shadow
by Shadow Project · last CVE Apr 14, 2023
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 1
Severity
All severities5Critical1High2Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Shadow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12424
9.8
3%
Aug 4
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors
Affected: before 4.5
CVE-2019-19882
7.8
1%
Dec 18
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured
Affected: 4.8
CVE-2016-6252
7.8
0%
Feb 17
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap
Affected: 4.2.1
CVE-2018-7169
5.3
2%
Feb 15
An issue was discovered in shadow 4.5
Affected: 4.5
CVE-2023-29383
3.3
0%
Apr 14
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)
Affected: 4.13
Showing 5