CVE-2015-3245

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode…

published August 11, 2015

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05391 · 92.6th percentile
Published
2015-08-11T14:00Z
EPSS history
Timeline
  • 11 AUG 14:00Z
    Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode…
    cvelistv5