Skip to main content

Libuser

2 CVEs product

Monthly

CVE-2015-3246 Aug 11, 14:59 MEDIUM POC KEV THREAT This Month

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

Privilege Escalation Denial Of Service Red Hat Libuser
NVD Exploit-DB VulDB
CVSS 3.1
5.1
EPSS
21.4%
Threat
4.7
CVE-2015-3245 Aug 11, 14:59 LOW POC THREAT Monitor

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 11.2%.

Denial Of Service Red Hat Libuser
NVD Exploit-DB
CVSS 2.0
2.1
EPSS
11.2%
EPSS 21% 4.7 CVSS 5.1
MEDIUM POC KEV THREAT This Month

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

Privilege Escalation Denial Of Service Red Hat +1
NVD Exploit-DB VulDB
EPSS 11% CVSS 2.1
LOW POC THREAT Monitor

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 11.2%.

Denial Of Service Red Hat Libuser
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy