PT-2014-2036 · Gnu+3 · Shadow+3

Seth Arnold + 1 · Published 2014-07-31 · Updated 2022-01-27 · CVE-2017-12424

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions shadow versions prior to 4.5

Description The issue is related to the newusers tool in the shadow utility, which can be manipulated with malformed input, leading to crashes or unspecified behaviors due to buffer overflow or memory corruption. This can cross a privilege boundary, particularly in web-hosting environments where an unprivileged user can create subaccounts through a Control Panel. The exploitation of this issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For shadow versions prior to 4.5, consider restricting access to the newusers tool to prevent unintended manipulation of internal data structures until a fixed version is available. As a temporary workaround, limit the creation of subaccounts in web-hosting environments to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2150

BDU:2021-05844

CVE-2017-12424

DLA-2596-1

MGASA-2017-0465

SUSE-SU-2017:2947-1

SUSE-SU-2017_2947-1

USN-5254-1

Affected Products

Alt Linux

Suse

Ubuntu

Shadow

References · 30

• https://github.com/shadow-maint/shadow/commit/954e3d2e7113e9ac06632aee3c69b8d818cc8952 · Patch
• https://osv.dev/vulnerability/USN-5254-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12424 · Security Note
• https://ubuntu.com/security/CVE-2018-7169 · Vendor Advisory
• https://security.gentoo.org/glsa/201710-16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12424 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2947-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-12424 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2596-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-12424 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5254-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0465 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0465.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12424 · Vendor Advisory