← CVE Radar
CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
7.4 HIGHEPSS 8.50%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.4 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2015-3246
- Status
- Published
- Assigner (CNA)
- redhat
- Published
- Aug 11, 2015
- Last modified
- 2026-10-01 18:02 UTC
Affected Products
No affected products have been published for this CVE yet.
References
- securityfocus.com http://www.securityfocus.com/bid/76022
- lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html
- exploit-db.com https://www.exploit-db.com/exploits/44633/
- access.redhat.com https://access.redhat.com/articles/1537873
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1482.html
- lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
- qualys.com https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt
- securitytracker.com http://www.securitytracker.com/id/1033040
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-1483.html
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS