Shadow Maint Shadow Utils
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Shadow Maint Shadow Utils.
By the Year
In 2026 there have been 0 vulnerabilities in Shadow Maint Shadow Utils. Shadow Utils did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 3.60 |
| 2023 | 1 | 5.50 |
It may take a day or so for new Shadow Utils vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Shadow Maint Shadow Utils Security Vulnerabilities
Shadow-utils Subuid Configuration Conflict Leading to Potential Account Takeover
CVE-2024-56433
3.6 - Low
- December 26, 2024
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
Insecure Default Initialization of Resource
Shadow-Utils Password Reinput Buffer Leak
CVE-2023-4641
5.5 - Medium
- December 27, 2023
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
authentification
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Shadow Maint Shadow Utils or by Shadow Maint? Click the Watch button to subscribe.
