Lucene search
+L

15 matches found

OSV
OSV
•added 2026/07/06 7:55 p.m.•15 views

GHSA-XV5W-CW7X-72GJ id: pretty-print uses effective GID instead of effective UID for name lookup

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS6AI score0.00137EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/07/06 7:55 p.m.•17 views

id: pretty-print uses effective GID instead of effective UID for name lookup

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS6AI score0.00137EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/24 8:32 p.m.•13 views

CVE-2026-35370

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS5.2AI score0.00127EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/22 5:16 p.m.•20 views

CVE-2026-35370

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS0.00127EPSS
SaveExploits1References1
OSV
OSV
•added 2026/04/22 5:16 p.m.•12 views

UBUNTU-CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00137EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/04/22 5:16 p.m.•17 views

CVE-2026-35370

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS5.8AI score0.00127EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/04/22 5:16 p.m.•14 views

CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00137EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/22 5:16 p.m.•12 views

UBUNTU-CVE-2026-35370

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS5.8AI score0.00127EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/04/22 4:08 p.m.•12 views

CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00137EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/04/22 4:08 p.m.•15 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00137EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2026/04/22 4:08 p.m.•33 views

CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.3AI score0.00137EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/04/22 4:08 p.m.•15 views

CVE-2026-35370

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS5.3AI score0.00127EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•21 views

PT-2026-34507

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The id utility exhibits incorrect behavior in its pretty print output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the...

3.3CVSS6AI score0.00137EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•0 views

CVE-2026-35370: Incorrect Authorization

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...

4.4CVSS6AI score0.00127EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-35371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The id utility in uutils coreutils exhibits incorrect behavior in its pretty print output when the real UID and effective UID differ. The implementation...

3.3CVSS5.4AI score0.00137EPSS
SaveExploits1References3
Rows per page
Query Builder