Ubuntu update for shadow
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2017-12424 CVE-2018-7169 |
| CWE-ID | CWE-119 CWE-264 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Ubuntu Operating systems & Components / Operating system uidmap (Ubuntu package) Operating systems & Components / Operating system package or component passwd (Ubuntu package) Operating systems & Components / Operating system package or component login (Ubuntu package) Operating systems & Components / Operating system package or component |
| Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Buffer overflow
EUVDB-ID: #VU32061
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2017-12424
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
MitigationUpdate the affected package shadow to the latest version.
Vulnerable software versionsUbuntu: 14.04 - 18.04
uidmap (Ubuntu package): before 1:4.5-1ubuntu2.2
passwd (Ubuntu package): before 1:4.5-1ubuntu2.2
login (Ubuntu package): before 1:4.5-1ubuntu2.2
CPE2.3- cpe:2.3:o:canonical:ubuntu:14.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:16.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:18.04:*:*:*:*:*:*:*
- cpe:2.3:a:canonical:uidmap_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:a:canonical:passwd_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:a:canonical:login_ubuntu_package:*:*:*:*:*:ubuntu:*:*
https://ubuntu.com/security/notices/USN-5254-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Privilege escalation
EUVDB-ID: #VU11179
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2018-7169
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain elevated privileges on the target system.
The weakness exists due to improper security restrictions when using the newgidmap setuid executable. A local attacker can gain root privileges.
Update the affected package shadow to the latest version.
Vulnerable software versionsUbuntu: 14.04 - 18.04
uidmap (Ubuntu package): before 1:4.5-1ubuntu2.2
passwd (Ubuntu package): before 1:4.5-1ubuntu2.2
login (Ubuntu package): before 1:4.5-1ubuntu2.2
CPE2.3- cpe:2.3:o:canonical:ubuntu:14.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:16.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:18.04:*:*:*:*:*:*:*
- cpe:2.3:a:canonical:uidmap_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:a:canonical:passwd_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:a:canonical:login_ubuntu_package:*:*:*:*:*:ubuntu:*:*
https://ubuntu.com/security/notices/USN-5254-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
