CVE-2016-6251
Updated shadow-utils packages fix security vulnerabilities
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2016-6251- Updated
- 2026-11-02
EUVDEUVD-2016-7181 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2016-7181- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2016-6251- Updated
- 2026-11-02
OSVMGASA-2017-0024 No score
Updated shadow-utils packages fix security vulnerabilities
It was found that shadow-utils-4.2.1 had a potentially unsafe use of getlogin with the concern that the utmp entry might have a spoofed username associated with a correct uid (CVE-2016-6251).
It was found that shadow-utils-4.2.1 had an incorrect integer handling problem where it looks like the int wrap is exploitable as a LPE, as the kernel is using 32bit uid's that are truncated from unsigned longs (64bit on x64) as returned by simple_strtoul() [map_write()]. (CVE-2016-6252).
- Record
MGASA-2017-0024- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadow-utilsMageia:5 |
before 4.2.1-6.mga5 | 4.2.1-6.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-6251 has been rejected by its source and should not be treated as a live vulnerability, published January 27, 2017. Fixed in shadow-utils 4.2.1-6.mga5.