Red Hat Security AdvisoryRHSA-2015:1482
libuser security update
Released 2015-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libuser-0.56.13-8.el6_7, libuser-python-0.56.13-8.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) libuser-devel-0.56.13-8.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) libuser-0.56.13-8.el6_7, libuser-python-0.56.13-8.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libuser-devel-0.56.13-8.el6_7
- Red Hat Enterprise Linux Server (v. 6) libuser-0.56.13-8.el6_7, libuser-0.56.13-8.el6_7.ppc, libuser-python-0.56.13-8.el6_7
- Red Hat Enterprise Linux Server Optional (v. 6) libuser-devel-0.56.13-8.el6_7, libuser-devel-0.56.13-8.el6_7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) libuser-0.56.13-8.el6_7, libuser-python-0.56.13-8.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 6) libuser-devel-0.56.13-8.el6_7
Fixes 2 records
Priority CRITICAL 92KEV
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) b…
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.08503 · Published 2015-08-11 · Partial fix CWE-367
Priority LOW 20
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.05391 · Published 2015-08-11 · Partial fix CWE-20
