---
id: CVE-2024-56433
title: >-
  shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid
  behavior (e.g., uid 100000 through 165535 for the first user account) that can
  realistically conflict with the uids of users defined on locally administered
  n…
summary: >-
  shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid
  behavior (e.g., uid 100000 through 165535 for the first user account) that can
  realistically conflict with the uids of users defined on locally administered
  n…
severity: low
cvss: 3.6
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N'
cwe:
  - CWE-1188
published: '2024-12-26'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:16.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-56433'
references:
  - url: >-
      https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241
    label: cve@mitre.org
  - url: 'https://github.com/shadow-maint/shadow/issues/1157'
    label: cve@mitre.org
  - url: 'https://github.com/shadow-maint/shadow/releases/tag/4.4'
    label: cve@mitre.org
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - exploit-available
  - cve.org
epss: 0.00426
epssPercentile: 0.36722
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/JonnyWhatshisface/CVE-2024-56433'
  checkedAt: '2026-10-27T16:42:47.380Z'
exploitAvailable: true
ingestedAt: '2026-10-15T03:30:12.771Z'
vendor: shadow-maint
product: shadow-utils
affected:
  - shadow-utils >= 4.4 <= 4.17.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-12-27T14:48:37.748358Z'
---

## Overview

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.