VYPR
← All advisories
Medium severity5.1CISA KEVNVD Advisory· Published Aug 11, 2015· Updated Aug 27, 2026

CVE-2015-3246

CVE-2015-3246

Description

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Red Hat/Libuser7 versions
    cpe:2.3:a:redhat:libuser:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:redhat:libuser:*:*:*:*:*:*:*:*range: <=0.56.13-5
    • cpe:2.3:a:redhat:libuser:0.60-1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libuser:0.60-2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libuser:0.60-3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libuser:0.60-4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libuser:0.60-5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libuser:0.60-6:*:*:*:*:*:*:*
  • Usermode/userhelperllm-fuzzy
    Range: <0.56.13-8, <0.60-7
  • Libuser/Libuserllm-fuzzy
    Range: <0.56.13-8, <0.60-7

Patches

Vulnerability mechanics

References

12

News mentions

7