CVE catalog

CVE-2013-4235

shadow: CVE-2013-4235

Severity: Medium · CVSS 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Published: Jan 1, 2013, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.31% · Oct 25, 2026

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	shadow	sid	`1:4.20.3-1`	fixed
Debian	shadow	forky	`1:4.20.3-1`	fixed
Debian	shadow	trixie	`1:4.17.4-2`	fixed
Debian	shadow	bookworm	`1:4.13+dfsg1-1+deb12u2`	fixed
Cpe	shadow	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	fedora	Not reported	Not reported	unknown
Cpe	enterprise_linux	Not reported	Not reported	unknown
Ubuntu	shadow	pro	`1:4.1.5.1-1.1ubuntu7`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu1`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu2`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu3`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu4`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5.2`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5.3`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5.4`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5.5+esm1`	vulnerable
Ubuntu	shadow	pro	`1:4.2-3.1ubuntu5.5+esm2`	fixed
Ubuntu	shadow	18.04	`1:4.2-3.2ubuntu4`	vulnerable
Ubuntu	shadow	18.04	`1:4.5-1ubuntu1`	vulnerable
Ubuntu	shadow	18.04	`1:4.5-1ubuntu2`	vulnerable
Ubuntu	shadow	18.04	`1:4.5-1ubuntu2.2`	vulnerable
Ubuntu	shadow	18.04	`1:4.5-1ubuntu2.3`	vulnerable
Ubuntu	shadow	18.04	`1:4.5-1ubuntu2.4`	fixed
Ubuntu	shadow	20.04	`1:4.5-1.1ubuntu4`	vulnerable
Ubuntu	shadow	20.04	`1:4.8-1ubuntu1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu2`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu3`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu4`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.2`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.3`	fixed
Ubuntu	shadow	22.04	`1:4.8.1-1ubuntu9`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-1ubuntu10`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu1`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu2`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu2.1`	fixed
Suse	shadow	linux enterprise module for basesystem 15 sp7	`4.17.2-150600.17.18.1`	fixed
Opensuse	shadow	leap 15.6	`4.17.2-150600.17.18.1`	fixed
Suse	shadow	linux enterprise micro 5.4	`4.8.1-150400.3.9.1`	fixed
Suse	shadow	linux enterprise high performance computing 15 sp3-ltss	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	linux enterprise server 15 sp3-ltss	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	linux enterprise server for sap applications 15 sp3	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	linux enterprise micro 5.1	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	linux enterprise micro 5.2	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	enterprise storage 7.1	`4.8.1-150300.4.15.1`	fixed
Suse	shadow	linux enterprise micro 5.3	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise module for basesystem 15 sp5	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise high performance computing 15 sp4-espos	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise high performance computing 15 sp4-ltss	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise server 15 sp4-ltss	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise server for sap applications 15 sp4	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	manager proxy 4.3	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	manager server 4.3	`4.8.1-150400.10.18.1`	fixed
Opensuse	shadow	leap 15.5	`4.8.1-150400.10.18.1`	fixed
Suse	shadow	linux enterprise server 12 sp5	`4.2.1-36.15.1`	fixed
Suse	shadow	linux enterprise server for sap applications 12 sp5	`4.2.1-36.15.1`	fixed
Suse	shadow	linux enterprise micro 5.5	`4.8.1-150500.3.9.1`	fixed
Opensuse	shadow	leap micro 5.5	`4.8.1-150500.3.9.1`	fixed
Suse	shadow	linux enterprise high performance computing 15 sp3-ltss	`4.8.1-150300.4.18.1`	fixed
Suse	shadow	linux enterprise server 15 sp3-ltss	`4.8.1-150300.4.18.1`	fixed
Suse	shadow	linux enterprise server for sap applications 15 sp3	`4.8.1-150300.4.18.1`	fixed
Suse	shadow	enterprise storage 7.1	`4.8.1-150300.4.18.1`	fixed
Opensuse	shadow	tumbleweed	`4.11.1-1.1`	fixed
Suse	shadow	linux enterprise micro 5.5	`4.8.1-150500.3.6.1`	fixed
Opensuse	shadow	leap micro 5.5	`4.8.1-150500.3.6.1`	fixed
Ubuntu	shadow	pro	`1:4.2-3.2ubuntu4`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu1`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2.2`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2.3`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2.4`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2.5`	vulnerable
Ubuntu	shadow	pro	`1:4.5-1ubuntu2.5+esm1`	vulnerable
Ubuntu	shadow	20.04	`1:4.5-1.1ubuntu4`	vulnerable
Ubuntu	shadow	20.04	`1:4.8-1ubuntu1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu2`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu3`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu4`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.1`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.2`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.3`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.4`	vulnerable
Ubuntu	shadow	20.04	`1:4.8.1-1ubuntu5.20.04.5`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-1ubuntu9`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-1ubuntu10`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu1`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu2`	vulnerable
Ubuntu	shadow	22.04	`1:4.8.1-2ubuntu2.1`	fixed
Suse	shadow	linux enterprise micro 5.4	`4.8.1-150400.3.12.1`	fixed
Suse	shadow	linux enterprise micro 5.1	`4.8.1-150300.4.18.1`	fixed
Suse	shadow	linux enterprise micro 5.2	`4.8.1-150300.4.18.1`	fixed
Suse	shadow	linux enterprise module for basesystem 15 sp6	`4.8.1-150600.17.6.1`	fixed
Opensuse	shadow	leap 15.6	`4.8.1-150600.17.6.1`	fixed
Suse	shadow	linux enterprise module for basesystem 15 sp6	`4.8.1-150600.17.3.1`	fixed
Opensuse	shadow	leap 15.6	`4.8.1-150600.17.3.1`	fixed
Suse	shadow	linux enterprise micro 5.3	`4.8.1-150400.10.21.1`	fixed
Suse	shadow	linux enterprise module for basesystem 15 sp5	`4.8.1-150400.10.21.1`	fixed
Opensuse	shadow	leap 15.5	`4.8.1-150400.10.21.1`	fixed
Suse	shadow	linux enterprise server 12 sp5	`4.2.1-36.12.1`	fixed
Suse	shadow	linux enterprise server for sap applications 12 sp5	`4.2.1-36.12.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	shadow	source	sid	`1:4.12.3+dfsg1-1`	unimportant	Not reported	[778950]
Debian	shadow	source	forky	`1:4.12.3+dfsg1-1`	unimportant	Not reported	[778950]
Debian	shadow	source	trixie	`1:4.12.3+dfsg1-1`	unimportant	Not reported	[778950]
Debian	shadow	source	bookworm	`1:4.12.3+dfsg1-1`	unimportant	Not reported	[778950]
Ubuntu	shadow	deb	pro	`1:4.2-3.1ubuntu5.5+esm2`	Not reported	USN-5745-1	Not reported
Ubuntu	shadow	deb	18.04	`1:4.5-1ubuntu2.4`	Not reported	USN-5745-1	Not reported
Ubuntu	shadow	deb	20.04	`1:4.8.1-1ubuntu5.20.04.3`	Not reported	USN-5745-1	Not reported
Ubuntu	shadow	deb	22.04	`1:4.8.1-2ubuntu2.1`	Not reported	USN-5745-1	Not reported
Suse	shadow	rpm	linux enterprise module for basesystem 15 sp7	`4.17.2-150600.17.18.1`	Not reported	SUSE-RU-2026:1228-1	Not reported
Opensuse	shadow	rpm	leap 15.6	`4.17.2-150600.17.18.1`	Not reported	SUSE-RU-2026:1228-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.4	`4.8.1-150400.3.9.1`	Not reported	SUSE-SU-2024:2657-1	Not reported
Suse	shadow	rpm	linux enterprise high performance computing 15 sp3-ltss	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	linux enterprise server 15 sp3-ltss	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	linux enterprise server for sap applications 15 sp3	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.1	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.2	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	enterprise storage 7.1	`4.8.1-150300.4.15.1`	Not reported	SUSE-SU-2024:2648-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.3	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise module for basesystem 15 sp5	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise high performance computing 15 sp4-espos	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise high performance computing 15 sp4-ltss	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise server 15 sp4-ltss	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise server for sap applications 15 sp4	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	manager proxy 4.3	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	manager server 4.3	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Opensuse	shadow	rpm	leap 15.5	`4.8.1-150400.10.18.1`	Not reported	SUSE-SU-2024:2658-1	Not reported
Suse	shadow	rpm	linux enterprise server 12 sp5	`4.2.1-36.15.1`	Not reported	SUSE-SU-2024:2805-1	Not reported
Suse	shadow	rpm	linux enterprise server for sap applications 12 sp5	`4.2.1-36.15.1`	Not reported	SUSE-SU-2024:2805-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.5	`4.8.1-150500.3.9.1`	Not reported	SUSE-SU-2024:2809-1	Not reported
Opensuse	shadow	rpm	leap micro 5.5	`4.8.1-150500.3.9.1`	Not reported	SUSE-SU-2024:2809-1	Not reported
Suse	shadow	rpm	linux enterprise high performance computing 15 sp3-ltss	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2025:0292-1	Not reported
Suse	shadow	rpm	linux enterprise server 15 sp3-ltss	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2025:0292-1	Not reported
Suse	shadow	rpm	linux enterprise server for sap applications 15 sp3	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2025:0292-1	Not reported
Suse	shadow	rpm	enterprise storage 7.1	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2025:0292-1	Not reported
Opensuse	shadow	rpm	tumbleweed	`4.11.1-1.1`	Not reported	OPENSUSE-SU-2024:11749-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.5	`4.8.1-150500.3.6.1`	Not reported	SUSE-SU-2024:2659-1	Not reported
Opensuse	shadow	rpm	leap micro 5.5	`4.8.1-150500.3.6.1`	Not reported	SUSE-SU-2024:2659-1	Not reported
Ubuntu	shadow	deb	22.04	`1:4.8.1-2ubuntu2.1`	Not reported	UBUNTU-CVE-2013-4235	Not reported
Suse	shadow	rpm	linux enterprise micro 5.4	`4.8.1-150400.3.12.1`	Not reported	SUSE-SU-2024:2807-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.1	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2024:2806-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.2	`4.8.1-150300.4.18.1`	Not reported	SUSE-SU-2024:2806-1	Not reported
Suse	shadow	rpm	linux enterprise module for basesystem 15 sp6	`4.8.1-150600.17.6.1`	Not reported	SUSE-SU-2024:2808-1	Not reported
Opensuse	shadow	rpm	leap 15.6	`4.8.1-150600.17.6.1`	Not reported	SUSE-SU-2024:2808-1	Not reported
Suse	shadow	rpm	linux enterprise module for basesystem 15 sp6	`4.8.1-150600.17.3.1`	Not reported	SUSE-SU-2024:2630-1	Not reported
Opensuse	shadow	rpm	leap 15.6	`4.8.1-150600.17.3.1`	Not reported	SUSE-SU-2024:2630-1	Not reported
Suse	shadow	rpm	linux enterprise micro 5.3	`4.8.1-150400.10.21.1`	Not reported	SUSE-SU-2024:2804-1	Not reported
Suse	shadow	rpm	linux enterprise module for basesystem 15 sp5	`4.8.1-150400.10.21.1`	Not reported	SUSE-SU-2024:2804-1	Not reported
Opensuse	shadow	rpm	leap 15.5	`4.8.1-150400.10.21.1`	Not reported	SUSE-SU-2024:2804-1	Not reported
Suse	shadow	rpm	linux enterprise server 12 sp5	`4.2.1-36.12.1`	Not reported	SUSE-SU-2024:2603-1	Not reported
Suse	shadow	rpm	linux enterprise server for sap applications 12 sp5	`4.2.1-36.12.1`	Not reported	SUSE-SU-2024:2603-1	Not reported

[Debian bug #778950]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libsubid6]Unknown
Source package: [shadow]
Details (1)
- 4.20.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.11.1-1.1
  Version impact unknown
  dsa · shadow · opensuse · tumbleweed
[libsubid-devel]Unknown
Source package: [shadow]
Details (1)
- 4.20.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.11.1-1.1
  Version impact unknown
  dsa · shadow · opensuse · tumbleweed
[login_defs]Unknown
Source package: [shadow]
Details (1)
- 4.20.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 4.11.1-1.1
  Version impact unknown
  dsa · shadow · opensuse · tumbleweed
[shadow-pw-mgmt]Unknown
Source package: [shadow]
Details (1)
- 4.20.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.11.1-1.1
  Version impact unknown
  dsa · shadow · opensuse · tumbleweed
[shadow]Fixed
Source package: [shadow]
Details (1)
- 4.20.2-2.1 · x86_64 · tumbleweed
  Fixed · Fixed: 4.11.1-1.1
  dsa · shadow · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[libsubid4]Fixed
Source package: [shadow]
Details (2)
- 1:4.13+dfsg1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
- 1:4.13+dfsg1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
[libsubid-dev]Fixed
Source package: [shadow]
Details (2)
- 1:4.13+dfsg1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
- 1:4.13+dfsg1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
[login]Fixed
Source package: [shadow]
Details (2)
- 1:4.13+dfsg1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
- 1:4.13+dfsg1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
[passwd]Fixed
Source package: [shadow]
Details (2)
- 1:4.13+dfsg1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
- 1:4.13+dfsg1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
[uidmap]Fixed
Source package: [shadow]
Details (2)
- 1:4.13+dfsg1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm
- 1:4.13+dfsg1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 1:4.12.3+dfsg1-1
  dsa · shadow · debian · bookworm

Observed: Oct 23, 2026, 5:08:31 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]