CVE-2023-4641
Shadow-utils: possible password leak during passwd(1) change
Résumé
Shadow-utils: possible password leak during passwd(1) change
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-4641 shadow Corrigé dans: 1:4.8.1-1+deb11u1
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org