CVE-2015-3245
11.08.2015, 14:59
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | libuser | 𝑥 ≤ 0.56.13-5 |
| redhat | libuser | 0.60-1 |
| redhat | libuser | 0.60-2 |
| redhat | libuser | 0.60-3 |
| redhat | libuser | 0.60-4 |
| redhat | libuser | 0.60-5 |
| redhat | libuser | 0.60-6 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libuser |
|
Common Weakness Enumeration
References