1 matches found
libuser: does not filter newline characters in the GECOS field
It was found that libuser, as used by the chfn userhelper functionality, did not properly filter out newline characters in GECOS fields. A local, authenticated user could use this flaw to corrupt the /etc/passwd file, resulting in a denial-of-service on the system...
2.1CVSS7.3AI score0.05271EPSS
SaveExploits10References5
20