CVE-2015-3246

CVE-2015-3246 affects the libuser library (shipped in the usermode package on RHEL, CentOS, Fedora, and Debian), where it directly modifies /etc/passwd without adequate error handling. An error during modification can leave the file in an inconsistent state , causing a denial of service. When com...

CVE-2012-5644

CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...