ByteOS Network

Vulnerability Details :

CVE-2016-6252

Summary

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-17 Feb, 2017 | 17:00

Updated At-06 Aug, 2024 | 01:22

Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:17 Feb, 2017 | 17:00

Updated At:06 Aug, 2024 | 01:22

▼CVE Numbering Authority (CNA)

Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2016/07/19/7	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/92055	vdb-entry x_refsource_BID
https://security.gentoo.org/glsa/201706-02	vendor-advisory x_refsource_GENTOO
https://github.com/shadow-maint/shadow/issues/27	x_refsource_CONFIRM
https://bugzilla.suse.com/show_bug.cgi?id=979282	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/07/25/7	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2016/07/19/6	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2016/07/20/2	mailing-list x_refsource_MLIST
http://www.debian.org/security/2017/dsa-3793	vendor-advisory x_refsource_DEBIAN

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/92055

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://security.gentoo.org/glsa/201706-02

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://github.com/shadow-maint/shadow/issues/27

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=979282

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/25/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/6

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/20/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.debian.org/security/2017/dsa-3793

Resource:

vendor-advisory

x_refsource_DEBIAN

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2016/07/19/7	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/92055	vdb-entry x_refsource_BID x_transferred
https://security.gentoo.org/glsa/201706-02	vendor-advisory x_refsource_GENTOO x_transferred
https://github.com/shadow-maint/shadow/issues/27	x_refsource_CONFIRM x_transferred
https://bugzilla.suse.com/show_bug.cgi?id=979282	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2016/07/25/7	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2016/07/19/6	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2016/07/20/2	mailing-list x_refsource_MLIST x_transferred
http://www.debian.org/security/2017/dsa-3793	vendor-advisory x_refsource_DEBIAN x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/7

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.securityfocus.com/bid/92055

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201706-02

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: https://github.com/shadow-maint/shadow/issues/27

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=979282

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/25/7

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/6

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/20/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.debian.org/security/2017/dsa-3793

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:17 Feb, 2017 | 17:59

Updated At:13 May, 2026 | 00:24

Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

shadow_project>>shadow>>4.2.1

cpe:2.3:a:shadow_project:shadow:4.2.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.debian.org/security/2017/dsa-3793	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2016/07/19/6	cve@mitre.org	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/19/7	cve@mitre.org	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/20/2	cve@mitre.org	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/25/7	cve@mitre.org	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/92055	cve@mitre.org	Third Party Advisory VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=979282	cve@mitre.org	Issue Tracking Patch
https://github.com/shadow-maint/shadow/issues/27	cve@mitre.org	Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201706-02	cve@mitre.org	N/A
http://www.debian.org/security/2017/dsa-3793	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2016/07/19/6	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/19/7	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/20/2	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/25/7	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/92055	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=979282	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://github.com/shadow-maint/shadow/issues/27	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201706-02	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.debian.org/security/2017/dsa-3793

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/6

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/19/7

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/20/2

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/07/25/7

Source: cve@mitre.org

Resource:

Mailing List

Patch

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/92055

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=979282

Source: cve@mitre.org

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/shadow-maint/shadow/issues/27

Source: cve@mitre.org

Resource:

Issue Tracking

Patch

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201706-02

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2017/dsa-3793