SP
Vendor
Shadow Project
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-29383 | SH Shadow Shadow Project | 3.3 | Apr 14 | In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger) |
| CVE-2019-19882 | SH Shadow Shadow Project | 7.8 | Dec 18 | shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured |
| CVE-2018-7169 | SH Shadow Shadow Project | 5.3 | Feb 15 | An issue was discovered in shadow 4.5 |
| CVE-2017-12424 | SH Shadow Shadow Project | 9.8 | Aug 4 | In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors |
| CVE-2016-6252 | SH Shadow Shadow Project | 7.8 | Feb 17 | Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap |