shadow-utils-subid (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package shadow-utils-subid, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-4641 — CVSS 4.7 (medium): A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second…
• CVE-2024-56433 — CVSS 3.6 (low): shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user…