CVE-2015-3246
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.
CISA Known Exploited Vulnerability
Vendor / Product
Red Hat — Libuser
Date Added
2026-08-26
Remediation Due
2026-09-09
This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://access.redhat.com/articles/1537873 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3246
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| libuser_project | libuser | < 0.56.13-8 |
| libuser_project | libuser | 0.60 – 0.60-7 |
| opensuse | opensuse | 13.2 |
| redhat | enterprise_linux | 5.0 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
References & Advisories (12)
Vendor Advisory
Vendor Advisory
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
Third Party Advisory
Third Party Advisory
Mitigation
Vendor Advisory
Mailing List
Third Party Advisory
Exploit
Broken Link
Broken Link