CVE-2013-4235
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
Published Dec 3, 2019 · updated Oct 14, 2026 · shadow shadow
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 3, 2019 · NIST NVD
Detected
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
Oct 14, 2026 · NIST NVD
Updated
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe debian/shadowversion unspecified
- cpe fedoraproject/fedora16
- cpe fedoraproject/fedora17
- cpe redhat/enterprise linux5
- cpe redhat/enterprise linux6.0
- vendor shadow shadowversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2013-4235
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
cve.org - FIRST EPSSExploitation probabilityCVE-2013-4235
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2013-4235
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
nvd.nist.gov