Cloudanix VulnDB

CVE-2015-3246

None CISA KEV

CVSS

—

EPSS

8.5%

Published

Aug 11, 2015

CISA due date

Sep 9, 2026

The record

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 libuser 0 1:0.62~dfsg-0.1
Debian:12 libuser 0 1:0.62~dfsg-0.1
Debian:13 libuser 0 1:0.62~dfsg-0.1
Debian:7 libuser 0 1:0.56.9.dfsg.1-1.2+deb7u1
Mageia:4 libuser 0 0.60-2.1.mga4
Mageia:5 libuser 0 0.60-5.1.mga5
Red Hat:enterprise_linux:6::client libuser 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::client libuser-debuginfo 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::client libuser-devel 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::client libuser-python 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::computenode libuser 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::computenode libuser-debuginfo 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::computenode libuser-devel 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::computenode libuser-python 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::server libuser 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::server libuser-debuginfo 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::server libuser-devel 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::server libuser-python 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::workstation libuser 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::workstation libuser-debuginfo 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::workstation libuser-devel 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:6::workstation libuser-python 0 0:0.56.13-8.el6_7
Red Hat:enterprise_linux:7::client libuser 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::client libuser-debuginfo 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::client libuser-devel 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::client libuser-python 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::computenode libuser 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::computenode libuser-debuginfo 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::computenode libuser-devel 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::computenode libuser-python 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::server libuser 0 0:0.60-7.ael7b_1
Red Hat:enterprise_linux:7::server libuser-debuginfo 0 0:0.60-7.ael7b_1
Red Hat:enterprise_linux:7::server libuser-devel 0 0:0.60-7.ael7b_1
Red Hat:enterprise_linux:7::server libuser-python 0 0:0.60-7.ael7b_1
Red Hat:enterprise_linux:7::workstation libuser 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::workstation libuser-debuginfo 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::workstation libuser-devel 0 0:0.60-7.el7_1
Red Hat:enterprise_linux:7::workstation libuser-python 0 0:0.60-7.el7_1
Ubuntu:16.04:LTS libuser 0 No fix
Ubuntu:25.04 libuser 0 No fix
Ubuntu:25.10 libuser 0 No fix
Ubuntu:Pro:14.04:LTS libuser 0 1:0.56.9.dfsg.1-1.2ubuntu2+esm1
Ubuntu:Pro:16.04:LTS libuser 0 No fix

Related vulnerabilities