https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-29383.htmlhttps://patchthecve.com/cve/CVE-2023-29383.htmlWed, 14 Oct 2026 23:17:17 +0000LOW 3.3: In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when vihttps://patchthecve.com/cve/CVE-2017-20002.htmlhttps://patchthecve.com/cve/CVE-2017-20002.htmlWed, 17 Jun 2026 01:14:54 +0000HIGH 7.8: The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). Thihttps://patchthecve.com/cve/CVE-2013-4235.htmlhttps://patchthecve.com/cve/CVE-2013-4235.htmlWed, 14 Oct 2026 07:16:36 +0000MEDIUM 4.7: shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treeshttps://patchthecve.com/cve/CVE-2019-16110.htmlhttps://patchthecve.com/cve/CVE-2019-16110.htmlWed, 17 Jun 2026 02:21:41 +0000HIGH 8.1: The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream.https://patchthecve.com/cve/CVE-2005-4890.htmlhttps://patchthecve.com/cve/CVE-2005-4890.htmlTue, 16 Jun 2026 22:19:40 +0000HIGH 7.8: There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.https://patchthecve.com/cve/CVE-2018-16588.htmlhttps://patchthecve.com/cve/CVE-2018-16588.htmlWed, 17 Jun 2026 01:44:30 +0000HIGH 7.8: Privilege escalation can occur in the SUSE useradd.c code in useradd, as distributed in the SUSE shadow package through 4.2.1-27.9.1 for SUSE Linux Enterprise 12 (SLE-12) and through 4.5-5.39 for SUSE Linux Enterprise 15 (SLE-15). Non-existing intermediate directories are created with mode 0777 durihttps://patchthecve.com/cve/CVE-2018-7169.htmlhttps://patchthecve.com/cve/CVE-2018-7169.htmlWed, 17 Jun 2026 02:02:43 +0000MEDIUM 5.3: An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths ihttps://patchthecve.com/cve/CVE-2017-12424.htmlhttps://patchthecve.com/cve/CVE-2017-12424.htmlWed, 17 Jun 2026 01:03:16 +0000CRITICAL 9.8: In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, chttps://patchthecve.com/cve/CVE-2016-6252.htmlhttps://patchthecve.com/cve/CVE-2016-6252.htmlWed, 17 Jun 2026 00:50:41 +0000HIGH 7.8: Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.