VYPR
← All advisories
High severity7.4CISA KEVNVD Advisory· Published Aug 11, 2015· Updated Oct 2, 2026

CVE-2015-3246

CVE-2015-3246

Description

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Libuser Project/Libuser
    cpe:2.3:a:libuser_project:libuser:*:*:*:*:*:*:*:*
    Range: <0.56.13-8
  • OpenSUSE/openSUSE
    cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server3 versions
    cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • Usermode/userhelperllm-fuzzy
    Range: <0.56.13-8, <0.60-7
  • Libuser/Libuserllm-fuzzy
    Range: <0.56.13-8, <0.60-7

Patches

Vulnerability mechanics

References

12

News mentions

7