CVE-2016-6252 Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
HighCVSS 7.8
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/shadow(Debian:12) | < 1:4.4-1 | 1:4.4-1 |
| debian/shadow(Debian:13) | < 1:4.4-1 | 1:4.4-1 |
| debian/shadow(Debian:14) | < 1:4.4-1 | 1:4.4-1 |
| shadow project shadow | = 4.2.1 | No fix listed |
| alpine/shadow(Alpine:v3.10) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.11) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.12) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.13) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.14) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.15) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.16) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.17) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.18) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.19) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.20) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.21) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.22) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.23) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.24) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.5) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.6) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.7) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.8) | < 4.2.1-r7 | 4.2.1-r7 |
| alpine/shadow(Alpine:v3.9) | < 4.2.1-r7 | 4.2.1-r7 |
References
- Debian Security Tracker CVE-2016-6252 vendor-advisory
- DSA-3793 vendor-advisory
- [oss-security] 20160719 subuid security patches for shadow package mailing-list third-party-advisory
- [oss-security] 20160719 Re: subuid security patches for shadow package mailing-list third-party-advisory
- [oss-security] 20160720 Re: subuid security patches for shadow package mailing-list third-party-advisory
- [oss-security] 20160725 Re: Re: [Pkg-shadow-devel] subuid security patches for shadow package mailing-list patch third-party-advisory
- 92055 third-party-advisory vdb-entry
- bugzilla.suse.com issue-tracking patch
- github.com issue-tracking patch third-party-advisory
- GLSA-201706-02 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking