Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-14104

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

util-linux util-linux

Default version status: unaffected

  • 0 to < 2.41.3affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:2.40.2-15.el10_1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.32.1-48.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.32.1-48.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.37.4-21.el9_7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.37.4-21.el9_7 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459707 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459711 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459759 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1789029076 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791966259 to < *unaffected

Red Hat Red Hat Ceph Storage 7

Default version status: affected

  • 1770632724 to < *unaffected

Red Hat Red Hat Ceph Storage 8

Default version status: affected

  • 1770630907 to < *unaffected

Red Hat Red Hat Ceph Storage 9

Default version status: affected

  • 1771816028 to < *unaffected

Red Hat Red Hat Hardened Images

Default version status: affected

  • 2.42-7.1.hum1 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1770740405 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1770646925 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773670073 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773672059 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773670137 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References