CVE-2015-3246

Published: Aug 11, 2015Modified: Oct 2, 2026CISA KEV

7.4

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.4 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

Affected (6)

Products: Redhat: Enterprise Linux · Opensuse: Opensuse · Libuser Project: Libuser

1 product

Enterprise Linux

1 product

Libuser Project

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Libuser Project Libuser	version < 0.56.13-8
Libuser Project Libuser	0.60 ≤ version < 0.60-7

Related CWEs

Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (22)

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html

Source: secalert@redhat.com

Broken Link

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html

Source: secalert@redhat.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1482.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-1483.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/76022

Source: secalert@redhat.com

Third Party Advisory

http://www.securitytracker.com/id/1033040

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/articles/1537873

Source: secalert@redhat.com

MitigationVendor Advisory

https://www.exploit-db.com/exploits/44633/

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt

Source: secalert@redhat.com

Exploit

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1482.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-1483.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/76022

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securitytracker.com/id/1033040

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/articles/1537873

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

https://www.exploit-db.com/exploits/44633/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.