CVE-2023-4641: redhat codeready_linux_builder
CVSS: 5.5v3.1MediumModified
AliasesMGASA-2023-0294SUSE-SU-2023:3591-1SUSE-SU-2023:4023-1SUSE-SU-2023:4024-1SUSE-SU-2023:4025-1SUSE-SU-2023:4027-1RHSA-2023:6632RHSA-2023:7112RHSA-2024:0417RHSA-2024:2577UBUNTU-CVE-2023-4641USN-6640-1DEBIAN-CVE-2023-4641openSUSE-SU-2026:10081-1
Published 27-12-2023Last modified 03-11-2025
Vulnerability summary
CVE-2023-4641 is a medium (CVSS 5.5) vulnerability in redhat codeready_linux_builder. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.26%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 27-12-2023PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
CVSS metrics
5 scores · 5 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NSources5 sources · 4.7–5.5
- CVE.orgCNA4.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · Red hatEcosystem advisory · calculated4.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 18-09-2026
18-09-202618-10-2026
EPSS score0.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-303Incorrect Implementation of Authentication AlgorithmThe requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Suse22 products
- shadow&distro=SUSE Enterprise Storage 7< 4.6-150100.3.11.1
- shadow&distro=SUSE Enterprise Storage 7.1< 4.8.1-150300.4.12.1
- shadow&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 4.6-150100.3.11.1
- shadow&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 4.6-150100.3.11.1
- shadow&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 4.8.1-150300.4.12.1
Redhat14 products
- codeready_linux_builder8.0 | 9.0
- codeready_linux_builder_for_arm648.0_aarch64 | 9.0_aarch64
- codeready_linux_builder_for_ibm_z_systems8.0_s390x | 9.0_s390x
- codeready_linux_builder_for_power_little_endian8.0_ppc64le | 9.0_ppc64le
- enterprise_linux8.0 | 9.0
Opensuse3 products
- shadow&distro=openSUSE Leap 15.4< 4.8.1-150400.10.12.1
- shadow&distro=openSUSE Leap 15.5< 4.8.1-150400.10.12.1
- shadow&distro=openSUSE Tumbleweed< 4.19.2-2.1
Mageia2 products
- shadow-utils< 4.6-4.2.mga8
- shadow-utils< 4.13-1.1.mga9
Debian1 product
- shadow< 1:4.13+dfsg1-1+deb12u1 | < 1:4.13+dfsg1-2
Shadow-maint1 product
- shadow-utils< 4.14.0
Ubuntu1 product
- shadow< 1:4.1.5.1-1ubuntu9.5+esm4 | < 1:4.2-3.1ubuntu5.5+esm4 | < 1:4.5-1ubuntu2.5+esm1 | < 1:4.8.1-1ubuntu5.20.04.5 | < 1:4.8.1-2ubuntu2.2
7 vendors · 44 products
References
33 links- access.redhat.com/errata/RHSA-2023:6632Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
- access.redhat.com/errata/RHSA-2023:7112Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
