{"id":"CVE-2016-6251","aliases":["EUVD-2016-7181","MGASA-2017-0024"],"status":"rejected","title":"Updated shadow-utils packages fix security vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-01-27T20:30:52Z","modified":"2026-04-16T06:24:53Z","affected":[{"source":"osv","ecosystem":"Mageia:5","package":"shadow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-6.mga5"}]}],"bundled":2}],"references":[{"url":"https://advisories.mageia.org/MGASA-2017-0024.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18984","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/07/20/2","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-6251","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none","status":"rejected","published":"2017-02-17T15:00:00Z","modified":"2017-02-17T14:57:01Z","updated_at":"2026-11-02T14:33:34.443637Z"}],"euvd":[{"id":"EUVD-2016-7181","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none","status":"published","published":"2017-02-17T15:00:00Z","modified":"2017-02-17T14:57:01Z","updated_at":"2026-11-03T04:08:13.792806Z"}],"nvd":[{"id":"CVE-2016-6251","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none","status":"rejected","published":"2017-02-17T15:59:00.13Z","modified":"2023-11-07T02:33:55.003Z","updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"MGASA-2017-0024","title":"Updated shadow-utils packages fix security vulnerabilities","description":"It was found that shadow-utils-4.2.1 had a potentially unsafe use of\ngetlogin with the concern that the utmp entry might have a spoofed\nusername associated with a correct uid (CVE-2016-6251).\n\nIt was found that shadow-utils-4.2.1 had an incorrect integer handling\nproblem where it looks like the int wrap is exploitable as a LPE, as the\nkernel is using 32bit uid's that are truncated from unsigned longs\n(64bit on x64) as returned by simple_strtoul() [map_write()].\n(CVE-2016-6252).\n","status":"published","published":"2017-01-27T20:30:52Z","modified":"2026-04-16T06:24:53.843658086Z","updated_at":"2026-11-02T15:49:40.103088Z"}]}}