{"id":"CVE-2015-3246","aliases":["DEBIAN-CVE-2015-3246","DLA-468-1","EUVD-2015-3301","GHSA-f52h-j689-x786","MGASA-2015-0278","RHSA-2015:1482","RHSA-2015:1483","UBUNTU-CVE-2015-3246","USN-8987-1"],"status":"published","title":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08503,"percentile":0.95074,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-264","CWE-367"],"published":"2015-07-24T16:36:06Z","modified":"2026-11-04T03:43:14Z","kev":{"date_added":"2026-08-26","due_date":"2026-09-09","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-08-26"},{"source":"kev","since":"2026-08-26"}],"exploits":[{"source":"metasploit","id":"exploit/linux/local/libuser_roothelper_priv_esc","title":"Libuser roothelper Privilege Escalation","type":"exploit","platform":"Linux","date":"2015-07-24","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/libuser_roothelper_priv_esc"},{"source":"exploitdb","id":"EDB-37706","title":"Libuser Library - Multiple Vulnerabilities","type":"dos","platform":"linux","date":"2015-07-27","verified":true,"url":"https://www.exploit-db.com/exploits/37706"},{"source":"exploitdb","id":"EDB-44633","title":"Libuser - 'roothelper' Local Privilege Escalation (Metasploit)","type":"local","platform":"linux","date":"2018-05-16","verified":true,"url":"https://www.exploit-db.com/exploits/44633"},{"source":"pocgithub","id":"HORKimhab/CVE-2015-3246","title":"HORKimhab/CVE-2015-3246","date":"2026-08-27","url":"https://github.com/HORKimhab/CVE-2015-3246"}],"fixes":[{"ecosystem":"Debian:12","package":"libuser","fixed_in":["1:0.62~dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libuser","fixed_in":["1:0.62~dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libuser","fixed_in":["1:0.62~dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libuser","fixed_in":["1:0.56.9.dfsg.1-1.2ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libuser","fixed_in":["1:0.60~dfsg-1.2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.62~dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.62~dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.62~dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.56.9.dfsg.1-1.2+deb7u1"}]}],"versions":["1:0.56.9.dfsg.1-1.2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60-2.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60-5.1.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.13-8.el6_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.ael7b_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.ael7b_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.ael7b_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.ael7b_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libuser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libuser-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libuser-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60-7.el7_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.56.9.dfsg.1-1.2ubuntu2+esm1"}]}],"versions":["1:0.56.9.dfsg.1-1.2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.60~dfsg-1.2ubuntu0.1~esm1"}]}],"versions":["1:0.60~dfsg-1.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.64+git20241106~dfsg-2","1:0.64+git20241106~dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.60~dfsg-1.2ubuntu0.1~esm1"}]}],"versions":["1:0.60~dfsg-1.2"],"bundled":2}],"products":[{"vendor":"libuser_project","product":"libuser"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"red hat","product":"libuser"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"http://www.securityfocus.com/bid/76022","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","web"]},{"url":"https://www.exploit-db.com/exploits/44633/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"https://access.redhat.com/articles/1537873","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","web","article"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://www.securitytracker.com/id/1033040","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3246","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/44633"},{"url":"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations"},{"url":"https://github.com/advisories/GHSA-f52h-j689-x786"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3246","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0278.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16459","tags":["report"]},{"url":"https://securityblog.redhat.com/2015/07/23/libuser-vulnerabilities/","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2015/07/23/16","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-1483.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1482","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1482.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3245","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3246","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1483","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1483.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3246","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8987-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3245","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3246","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:00:00Z","modified":"2026-10-01T18:02:50.537Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3301","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:00:00Z","modified":"2026-10-01T18:02:50Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2026-08-26","updated_at":"2026-11-02T17:27:44.322377Z"}],"ghsa":[{"id":"GHSA-f52h-j689-x786","title":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2022-05-14T03:22:31Z","modified":"2026-08-26T18:30:27Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T15:10:58.645101Z"}],"kev":[{"id":"CVE-2015-3246","title":"Red Hat Libuser Race Condition Vulnerability","description":"Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation. ","kev":{"date_added":"2026-08-26","due_date":"2026-09-09","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2015-3246","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:59:07.04Z","modified":"2026-10-02T11:33:29.473Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264","CWE-367"],"updated_at":"2026-11-02T14:03:07.96297Z"}],"osv":[{"id":"DEBIAN-CVE-2015-3246","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:59:07.04Z","modified":"2026-10-03T08:47:22.259759067Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-3246","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:59:00Z","modified":"2026-11-04T03:30:06.967699595Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T03:56:45.249606Z"},{"id":"CVE-2015-3246","description":"libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.","status":"published","published":"2015-08-11T14:59:07Z","modified":"2026-04-16T06:24:07.043112045Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DLA-468-1","title":"libuser - security update","status":"published","published":"2016-05-12T00:00:00Z","modified":"2026-03-09T02:11:10.701033Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2015-0278","title":"Updated libuser package fixes security vulnerabilities","description":"Two flaws were found in the way the libuser library handled the\n/etc/passwd file. A local attacker could use an application compiled\nagainst libuser (for example, userhelper) to manipulate the /etc/passwd\nfile, which could result in a denial of service or possibly allow the\nattacker to escalate their privileges to root (CVE-2015-3245,\nCVE-2015-3246).\n","status":"published","published":"2015-07-24T16:36:06Z","modified":"2026-04-16T06:22:28.59734797Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:1482","title":"Red Hat Security Advisory: libuser security update","status":"published","published":"2024-09-15T22:40:31Z","modified":"2026-08-27T10:30:04.496802909Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1483","title":"Red Hat Security Advisory: libuser security update","status":"published","published":"2024-09-15T22:40:25Z","modified":"2026-08-27T10:30:05.480555533Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"USN-8987-1","title":"libuser vulnerabilities","description":"It was discovered that libuser did not properly validate the GECOS field\nwhen changing user information. A local attacker could possibly use this\nissue to corrupt the passwd file, resulting in a denial of service.\n(CVE-2015-3245)\n\nIt was discovered that libuser modified the passwd file in place when\nupdating user information. A local attacker could possibly use this issue\nto cause an inconsistent file state, resulting in a denial of service, or\npossibly escalate privileges. (CVE-2015-3246)","status":"published","published":"2026-11-03T17:36:51Z","modified":"2026-11-04T03:43:14.568913089Z","updated_at":"2026-11-04T03:56:18.279609Z"}]}}