CVE-2023-29383
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-74, CWE-125
- Updated
- 2026-11-02
CVE List No score
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
CVE-2023-29383- Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2023-32955 No score
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
EUVD-2023-32955- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p9w4-8hh8-crcx
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
GHSA-p9w4-8hh8-crcx- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-74, CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-29383
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
ALPINE-CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
OSVAZL-26247
CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
AZL-26247- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 15 moreShow less
OSVBELL-CVE-2023-29383
- Record
BELL-CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-29383
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
DEBIAN-CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2023-1258
shadow security update
This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts.
Security Fix(es):
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.(CVE-2023-29383)
- Record
OESA-2023-1258- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2023-29383
CVE-2023-29383 in rootio-shadow - Patched by Root
Root has patched CVE-2023-29383 in the rootio-shadow package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-29383
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
UBUNTU-CVE-2023-29383- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSV No score
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
- Record
CVE-2023-29383- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12881-1 No score
libsubid-devel-4.13-6.1 on GA media
These are all security issues fixed in the libsubid-devel-4.13-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12881-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2066-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- Record
SUSE-SU-2023:2066-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2067-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- Record
SUSE-SU-2023:2067-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2068-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- Record
SUSE-SU-2023:2068-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2069-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- Record
SUSE-SU-2023:2069-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2070-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- Record
SUSE-SU-2023:2070-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0939-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
The following non-security bugs were fixed:
- bsc#1176006: Fix chage date miscalculation
- bsc#1188307: Fix passwd segfault
- bsc#1203823: Remove pam_keyinit from PAM config files
- bsc#1213189: Change lock mechanism to file locking to prevent lock files after power interruptions
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
- bsc#1205502: useradd audit event user id field cannot be interpretedd
- Record
SUSE-SU-2024:0939-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1007-1 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806).
The following non-security bugs were fixed:
- bsc#1176006: Fix chage date miscalculation
- bsc#1188307: Fix passwd segfault
- bsc#1203823: Remove pam_keyinit from PAM config files
- bsc#1213189: Change lock mechanism to file locking to prevent lock files after power interruptions
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
- bsc#1205502: useradd audit event user id field cannot be interpretedd
- Record
SUSE-SU-2024:1007-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1007-2 No score
Security update for shadow
This update for shadow fixes the following issues:
- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
- CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806).
The following non-security bugs were fixed:
- bsc#1176006: Fix chage date miscalculation
- bsc#1188307: Fix passwd segfault
- bsc#1203823: Remove pam_keyinit from PAM config files
- bsc#1213189: Change lock mechanism to file locking to prevent lock files after power interruptions
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
- bsc#1205502: useradd audit event user id field cannot be interpretedd
- Record
SUSE-SU-2024:1007-2- Updated
- 2026-11-02
Affected products
- shadow project shadow
- siemens ruggedcom rox mx5000
- siemens ruggedcom rox mx5000re
- siemens ruggedcom rox rx1400
- siemens ruggedcom rox rx1500
- siemens ruggedcom rox rx1501
- siemens ruggedcom rox rx1510
- siemens ruggedcom rox rx1511
- siemens ruggedcom rox rx1512
- siemens ruggedcom rox rx1524
- siemens ruggedcom rox rx1536
- siemens ruggedcom rox rx5000
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadowAlpine:v3.18 |
before 4.13-r3 | 4.13-r3 |
shadowAlpine:v3.19 |
before 4.13-r4 | 4.13-r4 |
shadowAlpine:v3.20 |
before 4.13-r4 | 4.13-r4 |
shadowAlpine:v3.21 |
before 4.13-r4 | 4.13-r4 |
shadowAlpine:v3.22 |
before 4.13-r4 | 4.13-r4 |
shadowAlpine:v3.23 |
before 4.13-r4 | 4.13-r4 |
shadowAlpine:v3.24 |
before 4.13-r4 | 4.13-r4 |
shadow-utilsAzure Linux:2 |
before 4.9-13 | 4.9-13 |
shadowAlpaquita:23 |
4.13-r0 up to 4.13-r1 | 4.13-r1 |
shadowDebian:12 |
before 1:4.13+dfsg1-1+deb12u1, plus listed versions 1:4.13+dfsg1-1 |
1:4.13+dfsg1-1+deb12u1 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
shadowDebian:13 |
before 1:4.13+dfsg1-2 | 1:4.13+dfsg1-2 |
shadowDebian:14 |
before 1:4.13+dfsg1-2 | 1:4.13+dfsg1-2 |
shadowDebian:11 From an advisory covering 2 CVEs |
before 1:4.8.1-1+deb11u1, plus listed versions 1:4.8.1-1 |
1:4.8.1-1+deb11u1 |
shadowopenEuler:20.03-LTS-SP1 |
before 4.8.1-7.oe1 | 4.8.1-7.oe1 |
shadowopenEuler:20.03-LTS-SP3 |
before 4.8.1-6.oe1 | 4.8.1-6.oe1 |
shadowopenEuler:22.03-LTS |
before 4.9-9.oe2203sp1 | 4.9-9.oe2203sp1 |
shadowopenEuler:22.03-LTS-SP1 |
before 4.9-9.oe2203sp1 | 4.9-9.oe2203sp1 |
rootio-shadowRoot:Ubuntu:22.04 |
before 1:4.8.1-2ubuntu2.2.root.io.4 | 1:4.8.1-2ubuntu2.2.root.io.41:4.8.1-2ubuntu2.2.root.io.21:4.8.1-2ubuntu2.2.root.io.31:4.8.1-2ubuntu2.2.aikido.5 |
shadowSUSE:Linux Enterprise Micro 5.3 |
before 4.8.1-150400.10.6.1 | 4.8.1-150400.10.6.1 |
shadowSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 4.8.1-150400.10.6.1 | 4.8.1-150400.10.6.1 |
shadowopenSUSE:Leap Micro 5.3 |
before 4.8.1-150400.10.6.1 | 4.8.1-150400.10.6.1 |
shadowopenSUSE:Leap 15.4 |
before 4.8.1-150400.10.6.1 | 4.8.1-150400.10.6.1 |
shadowSUSE:Linux Enterprise Server 12 SP5 |
before 4.2.1-36.3.1 | 4.2.1-36.3.1 |
shadowSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.2.1-36.3.1 | 4.2.1-36.3.1 |
shadowSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:Enterprise Storage 7 |
before 4.6-150100.3.8.1 | 4.6-150100.3.8.1 |
shadowSUSE:OpenStack Cloud 9 |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:OpenStack Cloud Crowbar 9 |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:Linux Enterprise Server 12 SP2-BCL |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:Linux Enterprise Server 12 SP4-ESPOS |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 4.2.1-27.22.1 | 4.2.1-27.22.1 |
shadowSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Real Time 15 SP3 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Manager Proxy 4.2 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Manager Server 4.2 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Micro 5.1 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Micro 5.2 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Enterprise Storage 7.1 |
before 4.8.1-150300.4.6.1 | 4.8.1-150300.4.6.1 |
shadowSUSE:Linux Enterprise Micro 5.4 |
before 4.8.1-150400.3.6.1 | 4.8.1-150400.3.6.1 |
shadowopenSUSE:Leap Micro 5.4 |
before 4.8.1-150400.3.6.1 | 4.8.1-150400.3.6.1 |
shadowSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 4.8.1-150500.3.3.1 | 4.8.1-150500.3.3.1 |
shadowUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:4.1.5.1-1ubuntu61:4.1.5.1-1ubuntu71:4.1.5.1-1ubuntu81:4.1.5.1-1ubuntu91:4.1.5.1-1ubuntu9.1 Show 7 moreShow less1:4.1.5.1-1ubuntu9.21:4.1.5.1-1ubuntu9.41:4.1.5.1-1ubuntu9.51:4.1.5.1-1ubuntu9.5+esm11:4.1.5.1-1ubuntu9.5+esm21:4.1.5.1-1ubuntu9.5+esm31:4.1.5.1-1ubuntu9.5+esm4 |
None known |
shadowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:4.1.5.1-1.1ubuntu71:4.2-3.1ubuntu11:4.2-3.1ubuntu21:4.2-3.1ubuntu31:4.2-3.1ubuntu4 Show 8 moreShow less1:4.2-3.1ubuntu51:4.2-3.1ubuntu5.21:4.2-3.1ubuntu5.31:4.2-3.1ubuntu5.41:4.2-3.1ubuntu5.5+esm11:4.2-3.1ubuntu5.5+esm21:4.2-3.1ubuntu5.5+esm31:4.2-3.1ubuntu5.5+esm4 |
None known |
shadowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:4.2-3.2ubuntu41:4.5-1ubuntu11:4.5-1ubuntu21:4.5-1ubuntu2.21:4.5-1ubuntu2.31:4.5-1ubuntu2.41:4.5-1ubuntu2.51:4.5-1ubuntu2.5+esm1 |
None known |
shadowUbuntu:20.04:LTS |
All versions, plus listed versions 1:4.5-1.1ubuntu41:4.8-1ubuntu11:4.8.1-1ubuntu11:4.8.1-1ubuntu21:4.8.1-1ubuntu3 Show 8 moreShow less1:4.8.1-1ubuntu41:4.8.1-1ubuntu51:4.8.1-1ubuntu5.20.041:4.8.1-1ubuntu5.20.04.11:4.8.1-1ubuntu5.20.04.21:4.8.1-1ubuntu5.20.04.31:4.8.1-1ubuntu5.20.04.41:4.8.1-1ubuntu5.20.04.5 |
None known |
shadowUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.8.1-1ubuntu91:4.8.1-1ubuntu101:4.8.1-2ubuntu11:4.8.1-2ubuntu21:4.8.1-2ubuntu2.11:4.8.1-2ubuntu2.2 |
None known |
shadowopenSUSE:Tumbleweed |
before 4.13-6.1 | 4.13-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-29383 is a low vulnerability (CVSS 3.3) in Shadow Project Shadow, published April 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in shadow 4.13-r3.
References
github.com/shadow-maint/shadow/pull/687
trustwave.com/en-us/resources/security-resources/security-advisories?fid=31797
lists.debian.org/debian-lts-announce/2025/04/msg00026.html
cert-portal.siemens.com/productcert/html/ssa-398330.html
Show 29 moreShow less
nvd.nist.gov/vuln/detail/CVE-2023-29383
security.alpinelinux.org/vuln/CVE-2023-29383
docs.bell-sw.com/security/cves/CVE-2023-29383
security-tracker.debian.org/tracker/CVE-2023-29383
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1258
suse.com/support/update/announcement/2023/suse-su-20232066-1
bugzilla.suse.com/1210507
ubuntu.com/security/CVE-2023-29383
cve.org/CVERecord?id=CVE-2023-29383