← Back

Shadow Utils

shadow-utils

Vendor: Shadow Maint • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4641
2Redhat
Shadow Maint
9Codeready Linux Builder
Codeready Linux Builder For Arm64Codeready Linux Builder For Ibm Z Systems+6 more
Jun 17, 2026
Dec 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry...Show more
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.Show less