{
  "cveId": "CVE-2018-7169",
  "url": "https://patchblox.com/security/cve/CVE-2018-7169",
  "summary": "CVE-2018-7169 is fixed in 3 products on 1 platform, first by login 1:4.5-1ubuntu2.2, released February 15, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "login: An issue was discovered in shadow 4.5",
  "description": "An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used \u0022group blacklisting\u0022 (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation.",
  "published": "2018-02-15T12:29:00Z",
  "severity": "Low",
  "epss": 0.01566,
  "epssPercentile": 0.7542,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "login",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:4.5-1ubuntu2.2",
      "fix": "login 1:4.5-1ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-login-1-4.5-1ubuntu2.2",
      "released": "2018-02-15T12:29:00Z"
    },
    {
      "platform": "linux",
      "product": "passwd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:4.5-1ubuntu2.2",
      "fix": "passwd 1:4.5-1ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-passwd-1-4.5-1ubuntu2.2",
      "released": "2018-02-15T12:29:00Z"
    },
    {
      "platform": "linux",
      "product": "uidmap",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:4.5-1ubuntu2.2",
      "fix": "uidmap 1:4.5-1ubuntu2.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-uidmap-1-4.5-1ubuntu2.2",
      "released": "2018-02-15T12:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}