Lucene search
HistoryDec 27, 2023 - 4:15 p.m.
CVE-2023-4641
vulnerability
password
security
memory
flaw
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
10.3%
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
Affected configurations
Node
shadow-maintshadow-utilsRange<4.14.0
Node
redhatcodeready_linux_builderMatch8.0
ORredhatcodeready_linux_builderMatch9.0
ORredhatcodeready_linux_builder_for_arm64Match8.0_aarch64
ORredhatcodeready_linux_builder_for_arm64Match9.0_aarch64
ORredhatcodeready_linux_builder_for_ibm_z_systemsMatch8.0_s390x
ORredhatcodeready_linux_builder_for_ibm_z_systemsMatch9.0_s390x
ORredhatcodeready_linux_builder_for_power_little_endianMatch8.0_ppc64le
ORredhatcodeready_linux_builder_for_power_little_endianMatch9.0_ppc64le
ORredhatenterprise_linuxMatch8.0
ORredhatenterprise_linuxMatch9.0
ORredhatenterprise_linux_for_arm_64Match8.0
ORredhatenterprise_linux_for_arm_64Match9.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0_s390x
ORredhatenterprise_linux_for_ibm_z_systemsMatch9.0_s390x
ORredhatenterprise_linux_for_power_little_endianMatch8.0_ppc64le
ORredhatenterprise_linux_for_power_little_endianMatch9.0_ppc64le
Related
cve
cve
CVE-2023-4641
2023-12-27 16:15:13
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2023:4024-1)
2023-10-11 00:00:00
SUSE SLES15 Security Update : shadow (SUSE-SU-2023:4027-1)
2023-10-11 00:00:00
RHEL 8 : shadow-utils (RHSA-2023:7112)
2023-11-14 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4023-1)
2023-10-11 00:00:00
Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3318)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3484)
2023-12-22 00:00:00
redhatcve
redhatcve
CVE-2023-4641
2023-08-30 17:46:42
redhat
redhat
(RHSA-2023:6632) Low: shadow-utils security and bug fix update
2023-11-07 06:10:41
(RHSA-2023:7112) Low: shadow-utils security and bug fix update
2023-11-14 08:45:33
(RHSA-2024:0417) Low: shadow-utils security update
2024-01-24 14:40:25
veracode
veracode
Information Disclosure
2023-10-30 10:18:25
osv
osv
Low: shadow-utils security and bug fix update
2023-11-07 00:00:00
Low: shadow-utils security and bug fix update
2023-11-14 00:00:00
shadow vulnerability
2024-02-15 18:05:16
debiancve
debiancve
CVE-2023-4641
2023-12-27 16:15:13
almalinux
almalinux
Low: shadow-utils security and bug fix update
2023-11-07 00:00:00
Low: shadow-utils security and bug fix update
2023-11-14 00:00:00
oraclelinux
oraclelinux
shadow-utils security and bug fix update
2023-11-11 00:00:00
shadow-utils security and bug fix update
2023-11-17 00:00:00
amazon
amazon
Low: shadow-utils
2023-09-13 23:44:00
Low: shadow-utils
2023-10-30 23:31:00
ubuntu
ubuntu
shadow vulnerability
2024-02-15 00:00:00
cvelist
cvelist
CVE-2023-4641 Shadow-utils: possible password leak during passwd(1) change
2023-12-27 15:43:22
redos
redos
ROS-20240409-07
2024-04-09 00:00:00
ubuntucve
ubuntucve
CVE-2023-4641
2023-12-27 00:00:00
mageia
mageia
Updated shadow-utils packages fix a security vulnerability
2023-10-23 00:04:51
prion
prion
Default credentials
2023-12-27 16:15:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0536
2023-12-28 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0705
2023-12-28 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0182
2024-01-02 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
10.3%
Related for NVD:CVE-2023-4641