Every CVE Search/ Get API key

CVE-2015-3246

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...

7.2 HighIn KEVPublic exploitFix available

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Exploit likelihood

8.50%Up 7.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 7.4

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
CVE-2015-3246
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-367
Updated
2026-11-02
EUVDEUVD-2015-3301 7.4

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
EUVD-2015-3301
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-f52h-j689-x786 5.1

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
GHSA-f52h-j689-x786
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-367
Updated
2026-11-02
CISA KEV No score

Red Hat Libuser Race Condition Vulnerability

Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.

Record
CVE-2015-3246
Updated
2026-11-02
NVD 7.4

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
CVE-2015-3246
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-264, CWE-367
Updated
2026-11-02
OSVDEBIAN-CVE-2015-3246 7.4

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
DEBIAN-CVE-2015-3246
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2015-3246 7.4

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
UBUNTU-CVE-2015-3246
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
OSV No score

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Record
CVE-2015-3246
Updated
2026-11-02
OSVMGASA-2015-0278 No score

Updated libuser package fixes security vulnerabilities

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root (CVE-2015-3245, CVE-2015-3246).

Record
MGASA-2015-0278
Updated
2026-11-02
OSVUSN-8987-1 No score

libuser vulnerabilities

It was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt the passwd file, resulting in a denial of service. (CVE-2015-3245)

It was discovered that libuser modified the passwd file in place when updating user information. A local attacker could possibly use this issue to cause an inconsistent file state, resulting in a denial of service, or possibly escalate privileges. (CVE-2015-3246)

Record
USN-8987-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libuser
Debian:12
 before 1:0.62~dfsg-0.1
1:0.62~dfsg-0.1
libuser
Debian:13
 before 1:0.62~dfsg-0.1
1:0.62~dfsg-0.1
libuser
Debian:14
 before 1:0.62~dfsg-0.1
1:0.62~dfsg-0.1
libuser
Debian:7
 before 1:0.56.9.dfsg.1-1.2+deb7u1, plus listed versions
1:0.56.9.dfsg.1-1.2
1:0.56.9.dfsg.1-1.2+deb7u1
libuser
Mageia:4
 before 0.60-2.1.mga4
0.60-2.1.mga4
libuser
Mageia:5
 before 0.60-5.1.mga5
0.60-5.1.mga5
libuser
Red Hat:enterprise_linux:6::client
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-python
Red Hat:enterprise_linux:6::client
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-devel
Red Hat:enterprise_linux:6::client
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
Show 31 moreShow less
Affected packages
PackageAffectedFixed
libuser
Red Hat:enterprise_linux:6::computenode
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-python
Red Hat:enterprise_linux:6::computenode
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser
Red Hat:enterprise_linux:6::server
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-python
Red Hat:enterprise_linux:6::server
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-devel
Red Hat:enterprise_linux:6::server
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser
Red Hat:enterprise_linux:6::workstation
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-python
Red Hat:enterprise_linux:6::workstation
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.56.13-8.el6_7
0:0.56.13-8.el6_7
libuser
Red Hat:enterprise_linux:7::client
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-python
Red Hat:enterprise_linux:7::client
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-devel
Red Hat:enterprise_linux:7::client
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser
Red Hat:enterprise_linux:7::computenode
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-python
Red Hat:enterprise_linux:7::computenode
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser
Red Hat:enterprise_linux:7::server
 before 0:0.60-7.ael7b_1
0:0.60-7.ael7b_1
libuser-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.60-7.ael7b_1
0:0.60-7.ael7b_1
libuser-python
Red Hat:enterprise_linux:7::server
 before 0:0.60-7.ael7b_1
0:0.60-7.ael7b_1
libuser-devel
Red Hat:enterprise_linux:7::server
 before 0:0.60-7.ael7b_1
0:0.60-7.ael7b_1
libuser
Red Hat:enterprise_linux:7::workstation
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-python
Red Hat:enterprise_linux:7::workstation
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.60-7.el7_1
0:0.60-7.el7_1
libuser
Ubuntu:Pro:14.04:LTS
 before 1:0.56.9.dfsg.1-1.2ubuntu2+esm1, plus listed versions
1:0.56.9.dfsg.1-1.2ubuntu2
1:0.56.9.dfsg.1-1.2ubuntu2+esm1
libuser
Ubuntu:Pro:16.04:LTS
 before 1:0.60~dfsg-1.2ubuntu0.1~esm1, plus listed versions
1:0.60~dfsg-1.2
1:0.60~dfsg-1.2ubuntu0.1~esm1
libuser
Ubuntu:25.10
 All versions, plus listed versions
1:0.64+git20241106~dfsg-21:0.64+git20241106~dfsg-3
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitLibuser roothelper Privilege Escalation2015-07-24
Exploit-DBLibuser Library - Multiple Vulnerabilities2015-07-27
Exploit-DBLibuser - 'roothelper' Local Privilege Escalation (Metasploit)2018-05-16
PoC in GitHubHORKimhab/CVE-2015-32462026-08-27

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affectedOSV
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3246 is a high vulnerability (CVSS 7.2) in Libuser Project Libuser, published July 24, 2015. CISA lists it as known to be exploited, since August 26, 2026. EUVD reports exploitation since August 26, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.50%, the 95th percentile. Fixed in libuser 1:0.62~dfsg-0.1.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open