Summary
generated automatically from NVD datalibuser, used by the userhelper program in the usermode package, writes directly to /etc/passwd, so a local user who triggers an error mid-modification can leave the file in an inconsistent state and cause a denial of service. The NVD description notes this can be combined with CVE-2015-3245 to gain privileges. Affected products include Red Hat Enterprise Linux, openSUSE 13.2 and the libuser project, and the flaw carries a CVSS v3.1 score of 7.4 (HIGH). It is listed in the CISA KEV catalog, indicating active exploitation.
NVD description
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-26. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2026-09-09
EPSS · FIRST.org
8.5%probability of exploitation in the next 30 days
Higher than 94% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 11 août 2015
- Updated
- 2 oct. 2026
- Status
- Analyzed
- Source
- secalert@redhat.com
Affected products
Weaknesses (CWE)
References (22)
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1482.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1483.htmlVendor Advisory
- http://www.securityfocus.com/bid/76022Third Party Advisory
- http://www.securitytracker.com/id/1033040Third Party Advisory
- https://access.redhat.com/articles/1537873MitigationVendor Advisory
- https://www.exploit-db.com/exploits/44633/Third Party AdvisoryVDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1482.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1483.htmlVendor Advisory
- + 7 more references on NVD
Similar CVEs
Other vulnerabilities of type CWE-264
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.