Vulnetix
Try Vulnetix Request Demo
CVE-2018-7169 PUBLISHED

An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used "group blacklisting" (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation.

EPSS 0.24% · 46.9th percentile

Risk Scores

EPSS Score
0.24%
46.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSshadow0, 1:4.1.5.1-1ubuntu6, 1:4.1.5.1-1ubuntu7
Ubuntu:18.04:LTSshadow1:4.5-1ubuntu2, 0, 1:4.2-3.2ubuntu4
Ubuntu:Pro:16.04:LTSshadow1:4.2-3.1ubuntu3, 1:4.2-3.1ubuntu4, 1:4.2-3.1ubuntu5

Timeline

References

Open in Interactive Console →