Ubuntu libuser allows denial of service and privilege escalation
Original title: USN-8987-1: libuser vulnerabilities
A local attacker can corrupt the passwd file or escalate privileges.
Ubuntu Security Notice USN-8987-1 reports two issues in libuser. It did not properly validate the GECOS field when changing user information, allowing a local attacker to corrupt the passwd file and cause denial of service. It also modified the passwd file in place when updating user information, causing an inconsistent file state and potentially allowing privilege escalation. (CVE-2015-3245) (CVE-2015-3246)
Impact: corrupt passwd file resulting in denial of service or privilege escalation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-3245 | — | — | — | ||
| CVE-2015-3246 | Race Condition in Red Hat libuser Allows Local Privilege Escalation | 7.4 | 9% | KEVPoC | KEV |
From the original article
It was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt the passwd file, resulting in a denial of service. (CVE-2015-3245) It was discovered that libuser modified the passwd file in place when updating user information.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.