cbcvebase.
CVE-2013-4235
published 2019-12-03

CVE-2013-4235: shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

medium4.7CVSS 3.1
AVLACHPRLUINSUCNIHAN
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Affected

12 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianshadow< shadow 1:4.12.3+dfsg1-1 (bookworm)shadow 1:4.12.3+dfsg1-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
redhatenterprise_linux
redhatenterprise_linux
shadowshadow
shadow_projectshadow>= 0 < 1:4.12.3+dfsg1-11:4.12.3+dfsg1-1
shadow_projectshadow>= 0 < 1:4.12.3+dfsg1-11:4.12.3+dfsg1-1
shadow_projectshadow>= 0 < 1:4.12.3+dfsg1-11:4.12.3+dfsg1-1

CVSS provenance

nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
osv4.7MEDIUM