CVE-2023-4641

Summary

CVE-2023-4641 is a vulnerability affecting the shadow-utils software. When users are prompted to enter a new password, the software asks for the password twice. If the password is incorrect on the second attempt, the software fails to clean the buffer used for the first entry, potentially exposing the password in memory to attackers with sufficient access. This flaw may result in unauthorized access to affected systems. It is recommended that users update their software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.