suse · CVE-2013-4235

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2013-4235 severity moderate: SUSE including 433 source package names (0.0.17-1.1:login_defs-4.8.1-150600.17.6.1, 0.0.17-1.1:shadow-4.8.1-150600.17.6.1, …), 1059 product×package rows across 404 product lines (Container bci/bci-init, Container bci/bci-sle15-kernel-module-devel, … (404 product lines)): Fixed 854, Known Affected 205.

Description:

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees