shadow vulnerabilities
CVEs whose affected-version data names the shadow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2023-29383Low· 3.3PoCIn Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block lis…
▾ Twilightshadow_project · shadowEPSS 0.43%via NVD
CVE-2013-4235Medium· 4.7shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
▾ Sunlitdebian · shadowEPSS 0.30%via NVD