PT-2018-3774 · Gnu+4 · Shadow+4

Craig Furman · Published 2018-02-15 · Updated 2024-06-15 · CVE-2018-7169

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions shadow version 4.5

Description An issue in the shadow utility allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted, enabling an attacker to remove themselves from a supplementary group. This may allow access to certain filesystem paths if the administrator has used group blacklisting to restrict access. The flaw reverts a security feature in the kernel to prevent privilege escalation.

Recommendations For shadow version 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALT-PU-2019-2549

ALT-PU-2019-2619

ALT-PU-2023-1679

BDU:2022-00731

CVE-2018-7169

MGASA-2018-0177

OPENSUSE-SU-2024:11378-1

SUSE-SU-2018:0662-1

SUSE-SU-2018_0662-1

USN-5254-1

Affected Products

Alt Linux

Astra Linux

Suse

Ubuntu

Shadow

References · 40

• 🔥 https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357 · Exploit
• https://security.gentoo.org/glsa/201805-09 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7169 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0177 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7169 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5254-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0662-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5254-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12424 · Vendor Advisory
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=283904092 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2023-1679 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11378-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-2619 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169 · Security Note