CVE-2012-5630

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and...

6.3 MediumFix available

CVE-2012-5630 is a medium vulnerability (CVSS 6.3) in Libuser, published November 25, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in libuser 1:0.60~dfsg-1.

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: High

Exploit likelihood

0.28%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.3

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: CVE-2012-5630
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0: 3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness: CWE-367
Updated: 2026-11-02

CVE List No score

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: CVE-2012-5630
Updated: 2026-11-02

EUVDEUVD-2012-5515 No score

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: EUVD-2012-5515
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4674-qwpx-v98w 6.3

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and...

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: GHSA-4674-qwpx-v98w
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-367
Updated: 2026-11-02

OSV 6.3

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: CVE-2012-5630
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-5630 6.3

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: DEBIAN-CVE-2012-5630
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-5630 6.3

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

Record: UBUNTU-CVE-2012-5630
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10368-1 No score

libuser-0.60-5.6 on GA media

These are all security issues fixed in the libuser-0.60-5.6 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10368-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libuser` Debian:12	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Debian:13	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Debian:14	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1:0.56.9.dfsg.1-1.2ubuntu21:0.56.9.dfsg.1-1.2ubuntu2+esm1	None known
`libuser` Ubuntu:25.10	All versions, plus listed versions 1:0.64+git20241106~dfsg-21:0.64+git20241106~dfsg-3	None known
`libuser` Ubuntu:26.10	All versions, plus listed versions 1:0.64+git20241106~dfsg-4build1	None known
`libuser` Ubuntu:26.04:LTS	All versions, plus listed versions 1:0.64+git20241106~dfsg-31:0.64+git20241106~dfsg-41:0.64+git20241106~dfsg-4build1	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less