Поиск уязвимостей
Количество 9
Количество 9
GHSA-mmpg-c26w-2pfg
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
CVE-2017-12424
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
CVE-2017-12424
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
CVE-2017-12424
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
CVE-2017-12424
In shadow before 4.5, the newusers tool could be made to manipulate in ...
openSUSE-SU-2017:2979-1
Security update for shadow
SUSE-SU-2017:2947-1
Security update for shadow
BDU:2021-05844
Уязвимость инструмента newusers утилиты для управления учетными записями shadow, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2017-2150
ALT-PU-2017-2150: package `shadow` update to version 4.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mmpg-c26w-2pfg In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2017-12424 In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts. | CVSS3: 9.8 | 3% Низкий | больше 9 лет назад |
 | CVE-2017-12424 In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts. | CVSS3: 4.5 | 3% Низкий | больше 9 лет назад |
 | CVE-2017-12424 In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts. | CVSS3: 9.8 | 3% Низкий | больше 9 лет назад |
| CVE-2017-12424 In shadow before 4.5, the newusers tool could be made to manipulate in ... | CVSS3: 9.8 | 3% Низкий | больше 9 лет назад |
 | openSUSE-SU-2017:2979-1 Security update for shadow | 3% Низкий | почти 9 лет назад | |
| SUSE-SU-2017:2947-1 Security update for shadow | 3% Низкий | около 9 лет назад | |
 | BDU:2021-05844 Уязвимость инструмента newusers утилиты для управления учетными записями shadow, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 3% Низкий | больше 12 лет назад |
| ALT-PU-2017-2150 ALT-PU-2017-2150: package `shadow` update to version 4.5-alt1 | CVSS3: 9.8 | около 9 лет назад |
Уязвимостей на страницу