Home

CVE-2015-3246

Description

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Risk Information

Base Score
8.4
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
21.424

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2015:1482) Important: libuser security update libuser-0.56.13-8.el6_7.i686.rpmLinux
(RHSA-2015:1482) Important: libuser security update libuser-0.56.13-8.el6_7.x86_64.rpmLinux
(RHSA-2015:1482) Important: libuser security update libuser-devel-0.56.13-8.el6_7.i686.rpmLinux
(RHSA-2015:1482) Important: libuser security update libuser-devel-0.56.13-8.el6_7.x86_64.rpmLinux
(RHSA-2015:1482) Important: libuser security update libuser-python-0.56.13-8.el6_7.i686.rpmLinux
(RHSA-2015:1482) Important: libuser security update libuser-python-0.56.13-8.el6_7.x86_64.rpmLinux
(RHSA-2015:1483) Important: libuser security update libuser-0.60-7.el7_1.i686.rpmLinux
(RHSA-2015:1483) Important: libuser security update libuser-0.60-7.el7_1.x86_64.rpmLinux
(RHSA-2015:1483) Important: libuser security update libuser-devel-0.60-7.el7_1.i686.rpmLinux
(RHSA-2015:1483) Important: libuser security update libuser-devel-0.60-7.el7_1.x86_64.rpmLinux
(RHSA-2015:1483) Important: libuser security update libuser-python-0.60-7.el7_1.x86_64.rpmLinux
Libuser update (ELSA-2015-1482) libuser-0.56.13-8.el6_7.x86_64.rpmLinux
Libuser-devel update (ELSA-2015-1482) libuser-devel-0.56.13-8.el6_7.x86_64.rpmLinux
Libuser-python update (ELSA-2015-1482) libuser-python-0.56.13-8.el6_7.x86_64.rpmLinux
Libuser update (ELSA-2015-1482) libuser-0.56.13-8.el6_7.i686.rpmLinux
Libuser-devel update (ELSA-2015-1482) libuser-devel-0.56.13-8.el6_7.i686.rpmLinux
Libuser-python update (ELSA-2015-1482) libuser-python-0.56.13-8.el6_7.i686.rpmLinux
(CESA-2015:1482) Important: libuser security update libuser-0.56.13-8.el6_7.i686.rpmLinux
(CESA-2015:1482) Important: libuser security update libuser-devel-0.56.13-8.el6_7.i686.rpmLinux
(CESA-2015:1482) Important: libuser security update libuser-python-0.56.13-8.el6_7.i686.rpmLinux
(RHSA-2015:1483)Important: security update libuser-debuginfo-0.60-7.el7_1.i686.rpmLinux
(RHSA-2015:1483)Important: security update libuser-debuginfo-0.60-7.el7_1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234