high7.8
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
Impact
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shadow Project | Shadow | Version 4.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2017/dsa-3793
- http://www.openwall.com/lists/oss-security/2016/07/19/6
- http://www.openwall.com/lists/oss-security/2016/07/19/7
- http://www.openwall.com/lists/oss-security/2016/07/20/2
- http://www.openwall.com/lists/oss-security/2016/07/25/7
- http://www.securityfocus.com/bid/92055
- https://bugzilla.suse.com/show_bug.cgi?id=979282
- https://github.com/shadow-maint/shadow/issues/27
- https://security.gentoo.org/glsa/201706-02
- http://www.debian.org/security/2017/dsa-3793
- http://www.openwall.com/lists/oss-security/2016/07/19/6
- http://www.openwall.com/lists/oss-security/2016/07/19/7
- http://www.openwall.com/lists/oss-security/2016/07/20/2
- http://www.openwall.com/lists/oss-security/2016/07/25/7
- http://www.securityfocus.com/bid/92055
- https://bugzilla.suse.com/show_bug.cgi?id=979282
- https://github.com/shadow-maint/shadow/issues/27
- https://security.gentoo.org/glsa/201706-02