← Database

CVE-2025-14104

MEDIUM CVSS: 6.1 Published: 2025-12-05 Modified: 2026-06-30

Description

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.

Affected Platforms

Unknown

Weakness Type

CWE-125

References