Wind River Support Network

HomeDefectsLIN7-8587
Fixed

LIN7-8587 : Security Advisory - shadow - CVE-2017-12424

Created: Aug 11, 2017    Updated: Sep 8, 2018
Resolved Date: Aug 23, 2017
Found In Version: 7.0.0.25
Fix Version: 7.0.0.26
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.

https://nvd.nist.gov/vuln/detail/CVE-2017-12424

Other Downloads


CVEs


Live chat
Online