CVE-2015-3245 Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a den...
LowCVSS 2.1
EPSS 5.4%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libuser(Debian:12) | < 1:0.62~dfsg-0.1 | 1:0.62~dfsg-0.1 |
| debian/libuser(Debian:13) | < 1:0.62~dfsg-0.1 | 1:0.62~dfsg-0.1 |
| debian/libuser(Debian:14) | < 1:0.62~dfsg-0.1 | 1:0.62~dfsg-0.1 |
| redhat libuser | <= 0.56.13-5 | No fix listed |
| redhat libuser | = 0.60-1 | No fix listed |
| redhat libuser | = 0.60-2 | No fix listed |
| redhat libuser | = 0.60-3 | No fix listed |
| redhat libuser | = 0.60-4 | No fix listed |
| redhat libuser | = 0.60-5 | No fix listed |
| redhat libuser | = 0.60-6 | No fix listed |
References
- Debian Security Tracker CVE-2015-3245 vendor-advisory
- bugs.debian.org issue-tracking
- FEDORA-2015-12064 vendor-advisory
- FEDORA-2015-12301 vendor-advisory
- RHSA-2015:1482 vendor-advisory
- RHSA-2015:1483 vendor-advisory
- 76021 vdb-entry
- 1033040 vdb-entry
- access.redhat.com
- 44633 exploit
- www.qualys.com exploit