Rocky Linux 8 : python38:3.8 (RLSA-2020:4641)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4641 advisory. - PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a...

Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3043)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3020)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0294)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0294 Updated shadow-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Potential password leak. CVE-2023-4641...

Updated shadow-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Potential password leak. CVE-2023-4641...

BELL-CVE-2023-4641

Bulletin has no description...

SUSE SLES15 Security Update : shadow (SUSE-SU-2023:4025-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4025-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

SUSE: Security Advisory (SUSE-SU-2023:4023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4025-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : shadow (SUSE-SU-2023:4027-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4027-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2023:4024-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4024-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding descriptio...

SUSE: Security Advisory (SUSE-SU-2023:4027-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4027-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE-SU-2023:4024-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE-SU-2023:4023-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

OESA-2023-1687 shadow security update

This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts. Security Fixes: When gpasswd1 asks for the new password, it asks twice as is usual for confirming the new password. Each of those 2 password prompt...

Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

Amazon Linux 2 : shadow-utils (ALAS-2023-2247)

The version of shadow-utils installed on the remote host is prior to 4.1.5.1-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2247 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fai...