Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-3246
HistoryAug 11, 2015 - 2:59 p.m.

CVE-2015-3246

2015-08-1114:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10

0.0004 Low

EPSS

Percentile

5.2%

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.