{"id":"CVE-2023-29383","aliases":["ALPINE-CVE-2023-29383","AZL-26247","BELL-CVE-2023-29383","DEBIAN-CVE-2023-29383","DLA-4130-1","EUVD-2023-32955","GHSA-p9w4-8hh8-crcx","OESA-2023-1258","ROOT-OS-UBUNTU-2204-CVE-2023-29383","SUSE-SU-2023:2066-1","SUSE-SU-2023:2067-1","SUSE-SU-2023:2068-1","SUSE-SU-2023:2069-1","SUSE-SU-2023:2070-1","SUSE-SU-2024:0939-1","SUSE-SU-2024:1007-1","SUSE-SU-2024:1007-2","UBUNTU-CVE-2023-29383","openSUSE-SU-2024:12881-1"],"status":"published","title":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00426,"percentile":0.37334,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-74"],"published":"2023-04-14T00:00:00Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"shadow","fixed_in":["4.13-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"shadow","fixed_in":["4.13-r4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"shadow-utils","fixed_in":["4.9-13"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"shadow","fixed_in":["4.13-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"shadow","fixed_in":["1:4.13+dfsg1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"shadow","fixed_in":["1:4.13+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"shadow","fixed_in":["1:4.13+dfsg1-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"shadow","fixed_in":["4.8.1-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"shadow","fixed_in":["4.8.1-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"shadow","fixed_in":["4.9-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"shadow","fixed_in":["4.9-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"rootio-shadow","fixed_in":["1:4.8.1-2ubuntu2.2.root.io.4","1:4.8.1-2ubuntu2.2.root.io.2","1:4.8.1-2ubuntu2.2.root.io.3","1:4.8.1-2ubuntu2.2.aikido.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"shadow","fixed_in":["4.8.1-150400.10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"shadow","fixed_in":["4.8.1-150400.10.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"shadow","fixed_in":["4.8.1-150400.10.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"shadow","fixed_in":["4.8.1-150400.10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"shadow","fixed_in":["4.2.1-36.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"shadow","fixed_in":["4.2.1-36.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"shadow","fixed_in":["4.6-150100.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"shadow","fixed_in":["4.2.1-27.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"shadow","fixed_in":["4.8.1-150300.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"shadow","fixed_in":["4.8.1-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"shadow","fixed_in":["4.8.1-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"shadow","fixed_in":["4.13-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-r4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"shadow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-13"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13-r0"},{"fixed":"4.13-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.13+dfsg1-1+deb12u1"}]}],"versions":["1:4.13+dfsg1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.13+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.13+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.8.1-1+deb11u1"}]}],"versions":["1:4.8.1-1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"rootio-shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.8.1-2ubuntu2.2.root.io.4"},{"fixed":"1:4.8.1-2ubuntu2.2.root.io.2"},{"fixed":"1:4.8.1-2ubuntu2.2.root.io.3"},{"fixed":"1:4.8.1-2ubuntu2.2.aikido.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.10.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.10.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-36.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-36.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-150100.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-27.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150300.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.1-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.5.1-1ubuntu6","1:4.1.5.1-1ubuntu7","1:4.1.5.1-1ubuntu8","1:4.1.5.1-1ubuntu9","1:4.1.5.1-1ubuntu9.1","1:4.1.5.1-1ubuntu9.2","1:4.1.5.1-1ubuntu9.4","1:4.1.5.1-1ubuntu9.5","1:4.1.5.1-1ubuntu9.5+esm1","1:4.1.5.1-1ubuntu9.5+esm2","1:4.1.5.1-1ubuntu9.5+esm3","1:4.1.5.1-1ubuntu9.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.5.1-1.1ubuntu7","1:4.2-3.1ubuntu1","1:4.2-3.1ubuntu2","1:4.2-3.1ubuntu3","1:4.2-3.1ubuntu4","1:4.2-3.1ubuntu5","1:4.2-3.1ubuntu5.2","1:4.2-3.1ubuntu5.3","1:4.2-3.1ubuntu5.4","1:4.2-3.1ubuntu5.5+esm1","1:4.2-3.1ubuntu5.5+esm2","1:4.2-3.1ubuntu5.5+esm3","1:4.2-3.1ubuntu5.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2-3.2ubuntu4","1:4.5-1ubuntu1","1:4.5-1ubuntu2","1:4.5-1ubuntu2.2","1:4.5-1ubuntu2.3","1:4.5-1ubuntu2.4","1:4.5-1ubuntu2.5","1:4.5-1ubuntu2.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.5-1.1ubuntu4","1:4.8-1ubuntu1","1:4.8.1-1ubuntu1","1:4.8.1-1ubuntu2","1:4.8.1-1ubuntu3","1:4.8.1-1ubuntu4","1:4.8.1-1ubuntu5","1:4.8.1-1ubuntu5.20.04","1:4.8.1-1ubuntu5.20.04.1","1:4.8.1-1ubuntu5.20.04.2","1:4.8.1-1ubuntu5.20.04.3","1:4.8.1-1ubuntu5.20.04.4","1:4.8.1-1ubuntu5.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.8.1-1ubuntu9","1:4.8.1-1ubuntu10","1:4.8.1-2ubuntu1","1:4.8.1-2ubuntu2","1:4.8.1-2ubuntu2.1","1:4.8.1-2ubuntu2.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-6.1"}]}]}],"products":[{"vendor":"shadow_project","product":"shadow"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/shadow-maint/shadow/pull/687","tags":["x_transferred","Issue Tracking","fix","report"]},{"url":"https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d","tags":["x_transferred","Patch","fix"]},{"url":"https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797","tags":["x_transferred","Exploit","Third Party Advisory","advisory","report"]},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/","tags":["x_transferred","Exploit","Third Party Advisory","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29383","tags":["web","advisory"]},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd"},{"url":"https://github.com/advisories/GHSA-p9w4-8hh8-crcx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-29383","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-29383","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29383.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-29383","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1258","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232066-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210507","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29383","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232067-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232068-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232069-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232070-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240939-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1144060","tags":["report"]},{"url":"https://bugzilla.suse.com/1176006","tags":["report"]},{"url":"https://bugzilla.suse.com/1188307","tags":["report"]},{"url":"https://bugzilla.suse.com/1203823","tags":["report"]},{"url":"https://bugzilla.suse.com/1205502","tags":["report"]},{"url":"https://bugzilla.suse.com/1206627","tags":["report"]},{"url":"https://bugzilla.suse.com/1213189","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241007-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214806","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4641","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241007-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-29383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29383","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-14T22:55:00.155Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-32955","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-14T22:55:00Z","updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-p9w4-8hh8-crcx","title":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-15T00:30:37Z","modified":"2026-10-15T00:30:39Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-74","CWE-125"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T22:15:07.68Z","modified":"2026-10-14T23:17:17.783Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-74","CWE-125"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"ALPINE-CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T22:15:07.68Z","modified":"2026-11-03T06:32:42.577365066Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-26247","title":"CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T22:15:07Z","modified":"2026-04-21T04:23:34.401968Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-29383","status":"published","published":"2023-08-31T12:14:53.889587Z","modified":"2026-01-26T09:34:51.018788Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T22:15:07.68Z","modified":"2026-10-26T18:00:55.314338775Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1258","title":"shadow security update","description":"This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts.\r\n\r\nSecurity Fix(es):\r\n\r\nIn Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \u0026quot;cat /etc/passwd\u0026quot; shows a rogue user account.(CVE-2023-29383)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:41.202169305Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"ROOT-OS-UBUNTU-2204-CVE-2023-29383","title":"CVE-2023-29383 in rootio-shadow - Patched by Root","description":"Root has patched CVE-2023-29383 in the rootio-shadow package for Root:Ubuntu:22.04. Multiple fixed versions available.","status":"published","published":"2026-07-27T19:52:08Z","modified":"2026-07-28T19:42:45.738334419Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"UBUNTU-CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T22:15:00Z","modified":"2025-10-24T05:01:54Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"CVE-2023-29383","description":"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-28T10:38:41.582596526Z","updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DLA-4130-1","title":"shadow - security update","status":"published","published":"2025-04-18T00:00:00Z","modified":"2026-03-09T01:18:55.07795Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2024:12881-1","title":"libsubid-devel-4.13-6.1 on GA media","description":"These are all security issues fixed in the libsubid-devel-4.13-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:52.992084Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2066-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).\n","status":"published","published":"2023-04-28T11:54:21Z","modified":"2026-02-04T02:58:26.410574Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2067-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).\n","status":"published","published":"2023-04-28T11:54:39Z","modified":"2026-02-04T03:46:38.413969Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2068-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).\n","status":"published","published":"2023-04-28T11:55:19Z","modified":"2026-02-04T02:13:53.061893Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2069-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). \n","status":"published","published":"2023-04-28T11:55:58Z","modified":"2026-02-04T02:57:58.967385Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2070-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).\n","status":"published","published":"2023-04-28T11:56:59Z","modified":"2026-02-04T02:28:33.329948Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2024:0939-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).\n\nThe following non-security bugs were fixed:\n\n- bsc#1176006: Fix chage date miscalculation\n- bsc#1188307: Fix passwd segfault\n- bsc#1203823: Remove pam_keyinit from PAM config files\n- bsc#1213189: Change lock mechanism to file locking to prevent\n  lock files after power interruptions\n- bsc#1206627: Add --prefix support to passwd, chpasswd and chage\n- bsc#1205502: useradd audit event user id field cannot be interpretedd \n","status":"published","published":"2024-03-20T08:03:40Z","modified":"2026-02-04T04:37:02.718944Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1007-1","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). \n- CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806).\n\nThe following non-security bugs were fixed:\n\n- bsc#1176006: Fix chage date miscalculation\n- bsc#1188307: Fix passwd segfault\n- bsc#1203823: Remove pam_keyinit from PAM config files\n- bsc#1213189: Change lock mechanism to file locking to prevent\nlock files after power interruptions\n- bsc#1206627: Add --prefix support to passwd, chpasswd and chage\n- bsc#1205502: useradd audit event user id field cannot be interpretedd\n","status":"published","published":"2024-03-27T09:51:45Z","modified":"2026-02-04T03:11:32.167474Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1007-2","title":"Security update for shadow","description":"This update for shadow fixes the following issues:\n\n- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). \n- CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806).\n\nThe following non-security bugs were fixed:\n\n- bsc#1176006: Fix chage date miscalculation\n- bsc#1188307: Fix passwd segfault\n- bsc#1203823: Remove pam_keyinit from PAM config files\n- bsc#1213189: Change lock mechanism to file locking to prevent\nlock files after power interruptions\n- bsc#1206627: Add --prefix support to passwd, chpasswd and chage\n- bsc#1205502: useradd audit event user id field cannot be interpretedd\n","status":"published","published":"2024-03-27T09:51:45Z","modified":"2026-02-04T03:53:55.750663Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}