CVE-2016-6252
CVE-2016-6252
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
CVSS 7.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
shadow Debian:12
- Affected ranges
- ECOSYSTEM: < 1:4.4-1
Update to 1:4.4-1
shadow Debian:13
- Affected ranges
- ECOSYSTEM: < 1:4.4-1
Update to 1:4.4-1
shadow Debian:14
- Affected ranges
- ECOSYSTEM: < 1:4.4-1
Update to 1:4.4-1
shadow Ubuntu:14.04:LTS
- Versions
- 1:4.1.5.1-1ubuntu6
- 1:4.1.5.1-1ubuntu7
- 1:4.1.5.1-1ubuntu8
- 1:4.1.5.1-1ubuntu9
- 1:4.1.5.1-1ubuntu9.1
- 1:4.1.5.1-1ubuntu9.2
- Affected ranges
- ECOSYSTEM: < 1:4.1.5.1-1ubuntu9.4
Update to 1:4.1.5.1-1ubuntu9.4
shadow Ubuntu:16.04:LTS
- Versions
- 1:4.1.5.1-1.1ubuntu7
- 1:4.2-3.1ubuntu1
- 1:4.2-3.1ubuntu2
- 1:4.2-3.1ubuntu3
- 1:4.2-3.1ubuntu4
- 1:4.2-3.1ubuntu5
- Affected ranges
- ECOSYSTEM: < 1:4.2-3.1ubuntu5.2
Update to 1:4.2-3.1ubuntu5.2
Original sources
- http://www.openwall.com/lists/oss-security/2016/07/19/7
- http://www.securityfocus.com/bid/92055
- https://security.gentoo.org/glsa/201706-02
- https://github.com/shadow-maint/shadow/issues/27
- https://bugzilla.suse.com/show_bug.cgi?id=979282
- http://www.openwall.com/lists/oss-security/2016/07/25/7
- http://www.openwall.com/lists/oss-security/2016/07/19/6
- http://www.openwall.com/lists/oss-security/2016/07/20/2
- http://www.debian.org/security/2017/dsa-3793
- https://nvd.nist.gov/vuln/detail/CVE-2016-6252