CVE-2012-5644

libuser has information disclosure when moving user's home directory

5.5 MediumFix available

CVE-2012-5644 is a medium vulnerability (CVSS 5.5) in Libuser, published November 25, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in libuser 1:0.60~dfsg-1.

libuser has information disclosure when moving user's home directory

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.41%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

libuser has information disclosure when moving user's home directory

Record: CVE-2012-5644
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

libuser has information disclosure when moving user's home directory

Record: CVE-2012-5644
Updated: 2026-11-02

EUVDEUVD-2012-5528 No score

libuser has information disclosure when moving user's home directory

Record: EUVD-2012-5528
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h7j3-xrmw-5xv3 5.5

libuser has information disclosure when moving user's home directory

libuser has information disclosure when moving user's home directory

Record: GHSA-h7j3-xrmw-5xv3
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSV 5.5

libuser has information disclosure when moving user's home directory

Record: CVE-2012-5644
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-5644 5.5

libuser has information disclosure when moving user's home directory

Record: DEBIAN-CVE-2012-5644
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-5644 5.5

libuser has information disclosure when moving user's home directory

Record: UBUNTU-CVE-2012-5644
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10368-1 No score

libuser-0.60-5.6 on GA media

These are all security issues fixed in the libuser-0.60-5.6 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10368-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libuser` Debian:12	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Debian:13	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Debian:14	before 1:0.60~dfsg-1	1:0.60~dfsg-1
`libuser` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1:0.56.9.dfsg.1-1.2ubuntu21:0.56.9.dfsg.1-1.2ubuntu2+esm1	None known
`libuser` Ubuntu:25.10	All versions, plus listed versions 1:0.64+git20241106~dfsg-21:0.64+git20241106~dfsg-3	None known
`libuser` Ubuntu:26.10	All versions, plus listed versions 1:0.64+git20241106~dfsg-4build1	None known
`libuser` Ubuntu:26.04:LTS	All versions, plus listed versions 1:0.64+git20241106~dfsg-31:0.64+git20241106~dfsg-41:0.64+git20241106~dfsg-4build1	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less