CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUI…
Published: 2025-12-05 · CVSS: 6.1 · CVSS 3.1
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7