THREAT OPS › Threat News › [NVD] CVE-2025-14104 (MEDIUM 6.1) — A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
[NVD] CVE-2025-14104 (MEDIUM 6.1) — A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
CVE-2025-14104 CVSS: 6.1 MEDIUM Published: 2025-12-05T17:16:03.117
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
Indicators of compromise
- CVE-2025-14104cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-14104