ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-4641

—
CVSS 3.1
5.5 medium
EPSS
<1%p17
Published
()
Modified
Description

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.

Vendors
shadow-maintredhat
Products
shadow-utils, codeready linux builder, codeready linux builder for arm64, codeready linux builder for ibm z systems, codeready linux builder for power little endian, enterprise linux, enterprise linux for arm 64, enterprise linux for ibm z systems, enterprise linux for power little endian
Weakness
CWE-303, CWE-287
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.