CVE-2018-7169
LowSummary
An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths.
Risk Assessment
The risk involves potential privilege escalation or access control bypass, which could lead to unauthorized access to sensitive data or the system.
Recommendation
It is recommended to immediately update shadow-utils to a version after 4.5 that fixes this vulnerability, and to restrict setuid permissions on newgidmap if possible.
Original NVD description (English source)
An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths i