CVE-2016-6252

Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.

• CWE-190

• http://www.debian.org/security/2017/dsa-3793
• http://www.openwall.com/lists/oss-security/2016/07/19/6Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/19/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/20/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/25/7Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/92055Third Party Advisory, VDB Entry
• https://bugzilla.suse.com/show_bug.cgi?id=979282Issue Tracking, Patch
• https://github.com/shadow-maint/shadow/issues/27Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-02
• http://www.debian.org/security/2017/dsa-3793
• http://www.openwall.com/lists/oss-security/2016/07/19/6Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/19/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/20/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/25/7Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/92055Third Party Advisory, VDB Entry
• https://bugzilla.suse.com/show_bug.cgi?id=979282Issue Tracking, Patch
• https://github.com/shadow-maint/shadow/issues/27Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-02

Published

Feb 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6245OpenBSD 5.8 and 5.9 allows local users to cause a denial of …
• CVE-2016-6246OpenBSD 5.8 and 5.9 allows certain local users with kern.use…
• CVE-2016-6247OpenBSD 5.8 and 5.9 allows certain local users to cause a de…
• CVE-2016-6249F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which tim…
• CVE-2016-6250Integer overflow in the ISO9660 writer in libarchive before …
• CVE-2016-6251Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-6253mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through…
• CVE-2016-6254Heap-based buffer overflow in the parse_packet function in n…
• CVE-2016-6255Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote …
• CVE-2016-6256SAP Business One for Android 1.2.3 allows remote attackers t…
• CVE-2016-6257The firmware in Lenovo Ultraslim dongles, as used with Lenov…6.5
• CVE-2016-6258The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earl…