Libuser

libuser

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-5644 4Debian FedoraprojectLibuser Project+1 more 4Debian Linux Enterprise LinuxFedora+1 more Jan 23, 2026 Nov 25, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 libuser has information disclosure when moving user's home directory
CVE-2012-5630 3Fedoraproject Libuser ProjectRedhat 3Enterprise Linux FedoraLibuser Nov 21, 2024 Nov 25, 2019 N/A· v4 6.3 MEDIUM· v3 3.3 LOW· v2 libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
CVE-2015-3246 3Libuser Project OpensuseRedhat 3Enterprise Linux LibuserOpensuse Oct 2, 2026 Aug 11, 2015 N/A· v4 7.4 HIGH· v3 7.2 HIGH· v2 libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) b...Show more libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.Show less