205 matches found
CVE-2024-56433
CVE-2024-56433 shadow-utils - Insecure default subordinate ID assignment for local users Summary The default subordinate ID assignment creates risk for collision with existing user ID's, creating potential for arbitrarily changing UID/GID and gaining unauthorized access to data and network...
CentOS Linux 6 [TuxCare] Security Update: shadow-utils (CENTOS6:CLSA-2026:1777947090)
The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777947090 advisory. - In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input...
Rocky Linux 9.6 [CIQ] Security Update: shadow-utils / shadow-utils-subid / shadow-utils-subid-devel (ciqsa-2026_1389)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261389 advisory. This advisory aggregates security fixes for the shadow-utils SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-56433. Tenable has extracted the preceding...
Rocky Linux 10.1 [CIQ] Security Update: shadow-utils / shadow-utils-debuginfo / shadow-utils-debugsource / etc (crlsa-2025_20145)
The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520145 advisory. shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 Tenable has extracted the preceding description...
Rocky Linux 9 [CIQ] Security Update: shadow-utils / shadow-utils-debuginfo / shadow-utils-debugsource / etc (crlsa-2025_20559)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520559 advisory. shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 Tenable has extracted the preceding description block...
CentOS Linux 7 [TuxCare] Security Update: shadow-utils (CENTOS7:CLSA-2026:1779352627)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1779352627 advisory. - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...
AlmaLinux 9.2 [TuxCare] Security Update: shadow-utils / shadow-utils-subid / shadow-utils-subid-devel (ALMALINUX9.2:CLSA-2024:1719246768)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1719246768 advisory. - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...
CLSA-2026-1779352627 shadow-utils: Fix of CVE-2023-4641
CVE-2023-4641: fix password leak in gpasswd...
CLSA-2026-1777945742 shadow-utils: Fix of CVE-2017-12424
CVE-2017-12424: fix heap buffer overflow in commoniosort when an entry has a NULL line...
MiracleLinux 9 : shadow-utils-4.9-15.el9 (AXSA:2025-11140:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11140:02 advisory. shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 Tenable has extracted the preceding descriptio...
shadow-utils security update
2:4.15.0-8 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-93172...
shadow-utils security update
2:4.9-15 - nss.c: shadowlogfd to stderr. Resolves: RHEL-83431 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940...
RHSA-2025:20145 Red Hat Security Advisory: shadow-utils security update
Bulletin has no description...
RHSA-2025:20559 Red Hat Security Advisory: shadow-utils security update
Bulletin has no description...
ALSA-2025:20559 Low: shadow-utils security update
The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. Security Fixes: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 For...
EUVD-2001-0120
Malware in sbrugna...
EUVD-2002-1492
Malware in sbrugna...
EUVD-2006-1178
Malware in sbrugna...