Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:4023-1

Опубликовано: 10 окт. 2023
Источник: suse-cvrf

Описание

Security update for shadow

This update for shadow fixes the following issues:

  • CVE-2023-4641: Fixed potential password leak (bsc#1214806).

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
shadow-4.2.1-36.6.1
Container suse/sles12sp5:latest
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-Basic-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-HPC-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-HPC-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-SAP-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-SAP-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-Standard-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-EC2-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-EC2-ECS-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-EC2-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-EC2-SAP-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-EC2-SAP-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-GCE-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-GCE-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-GCE-SAP-BYOS
shadow-4.2.1-36.6.1
Image SLES12-SP5-GCE-SAP-On-Demand
shadow-4.2.1-36.6.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
shadow-4.2.1-36.6.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
shadow-4.2.1-36.6.1
SUSE Linux Enterprise Server 12 SP5
shadow-4.2.1-36.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
shadow-4.2.1-36.6.1

Ссылки

Описание

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:shadow-4.2.1-36.6.1
Container suse/sles12sp5:latest:shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-BYOS:shadow-4.2.1-36.6.1
Image SLES12-SP5-Azure-Basic-On-Demand:shadow-4.2.1-36.6.1
Ссылки