Findings

CVE-2013-4235

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Published Dec 3, 2019 · updated Oct 14, 2026 · debian shadow

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Timeline

Detection, updates, and resolution for this record.

  1. Dec 3, 2019 · NIST NVD

    Detected

    shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

  2. Oct 14, 2026 · NIST NVD

    Updated

    shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux8.0
  • cpe debian/debian linux9.0
  • cpe debian/shadowversion unspecified
  • cpe fedoraproject/fedora16
  • cpe fedoraproject/fedora17
  • cpe redhat/enterprise linux5
  • cpe redhat/enterprise linux6.0

Sources

  • CVE.orgCVE-2013-4235

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2013-4235

    shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

    nvd.nist.gov

References