{"schemaVersion":3,"id":"CVE-2016-6252","aliases":["SUSE-SU-2018:1995-1","SUSE-SU-2018:1997-1","SUSE-SU-2018:1997-2","UBUNTU-CVE-2016-6252","DEBIAN-CVE-2016-6252"],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.","dates":{"published":"2017-02-17T17:00:00.000Z","modified":"2024-08-06T01:22:20.732Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.6,"severity":"medium","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true}]},"epss":{"probability":0.00409,"percentile":0.33616,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00409},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00396,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00409,"percentile":0.33616}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00396,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00409,"percentile":0.33616}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"debian","product":"shadow","name":"shadow","label":"shadow","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/shadow","purlType":"deb","versions":[{"text":"< 1:4.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.4-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"shadow","name":"shadow","label":"shadow","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/shadow","purlType":"deb","versions":[{"text":"< 1:4.1.5.1-1ubuntu9.4","noFixRecorded":false,"fixedIn":null},{"text":"< 1:4.2-3.1ubuntu5.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.1.5.1-1ubuntu9.4 | < 1:4.2-3.1ubuntu5.2","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Enterprise Storage 4","name":"shadow","label":"shadow&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 4.1.5.1-19.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.5.1-19.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server 12 SP3","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server 12-LTSS","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server 12-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server 12-LTSS","purlType":"rpm","versions":[{"text":"< 4.1.5.1-19.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.5.1-19.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 4.1.5.1-19.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.5.1-19.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"shadow","label":"shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"shadow&distro=SUSE OpenStack Cloud 7","name":"shadow","label":"shadow&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/shadow&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 4.2.1-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-27.9.1","eol":null,"hubHref":null},{"vendor":"shadow_project","product":"shadow","name":"shadow","label":"shadow","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.2.1","eol":null,"hubHref":"/vendor/shadow_project/shadow"}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/19/7","label":"www.openwall.com/lists/oss-security/2016/07/19/7","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92055","label":"www.securityfocus.com/bid/92055","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-02","label":"security.gentoo.org/glsa/201706-02","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://github.com/shadow-maint/shadow/issues/27","label":"github.com/shadow-maint/shadow/issues/27","hostname":"github.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=979282","label":"bugzilla.suse.com/show_bug.cgi?id=979282","hostname":"bugzilla.suse.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/25/7","label":"www.openwall.com/lists/oss-security/2016/07/25/7","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/19/6","label":"www.openwall.com/lists/oss-security/2016/07/19/6","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/20/2","label":"www.openwall.com/lists/oss-security/2016/07/20/2","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3793","label":"www.debian.org/security/2017/dsa-3793","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181995-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20181995-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1099310","label":"bugzilla.suse.com/1099310","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6252","label":"www.suse.com/security/cve/CVE-2016-6252","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181997-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20181997-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181997-2/","label":"www.suse.com/support/update/announcement/2018/suse-su-20181997-2/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-6252","label":"ubuntu.com/security/CVE-2016-6252","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3276-1","label":"ubuntu.com/security/notices/USN-3276-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6252","label":"www.cve.org/CVERecord?id=CVE-2016-6252","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-6252","label":"security-tracker.debian.org/tracker/CVE-2016-6252","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-3793-1","MGASA-2017-0024","USN-3276-1"],"duplicates":[],"related":["USN-3276-1"]},"timeline":[{"kind":"published","date":"2017-02-17T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T01:22:20.732Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:41:23.607Z","stale":false,"partial":false}}