CVE-2025-14104 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

[
  {
    "vendor": "util-linux",
    "product": "util-linux",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.41.3",
        "versionType": "semver"
      }
    ],
    "packageName": "util-linux",
    "collectionURL": "https://github.com/util-linux/util-linux",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.40.2-15.el10_1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.32.1-48.el8_10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/a:redhat:enterprise_linux:8::crb",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.32.1-48.el8_10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/a:redhat:enterprise_linux:8::crb",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.37.4-21.el9_7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.37.4-21.el9_7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ceph Storage 7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhceph/rhceph-7-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1770632724",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ceph_storage:7::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ceph Storage 8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhceph/rhceph-8-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1770630907",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ceph_storage:8::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ceph Storage 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhceph/rhceph-9-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1771816028",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ceph_storage:9::el10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "util-linux-main",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.42-7.1.hum1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1770740405",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhui5/installer-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1770646925",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhui5/cds-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1773670073",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhui5/haproxy-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1773672059",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhui5/rhua-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1773670137",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux-ng",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "util-linux",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  }
]