Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:43:17 +0000 CVE-2023-4641 — Shadow-utils: possible password leak during passwd(1) change https://vulnerability.circl.lu/vuln/cve-2023-4641 <p><strong>Affected:</strong> shadow-utils, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.</p> <p><strong>Affected:</strong> shadow-utils, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.</p> https://vulnerability.circl.lu/vuln/cve-2023-4641 USN-6640-1 — shadow vulnerability https://vulnerability.circl.lu/vuln/usn-6640-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: shadow, Ubuntu:Pro:16.04:LTS: shadow, Ubuntu:Pro:18.04:LTS: shadow, Ubuntu:20.04:LTS: shadow, Ubuntu:22.04:LTS: shadow</p> <p>It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue to retrieve a password from memory, exposing sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: shadow, Ubuntu:Pro:16.04:LTS: shadow, Ubuntu:Pro:18.04:LTS: shadow, Ubuntu:20.04:LTS: shadow, Ubuntu:22.04:LTS: shadow</p> <p>It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue to retrieve a password from memory, exposing sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-6640-1