Red Hat Security AdvisoryRHSA-2015:1483
libuser security update
Released 2015-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libuser-0.60-7.el7_1, libuser-python-0.60-7.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) libuser-devel-0.60-7.el7_1
- Red Hat Enterprise Linux ComputeNode (v. 7) libuser-0.60-7.el7_1, libuser-python-0.60-7.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libuser-devel-0.60-7.el7_1
- Red Hat Enterprise Linux Server (v. 7) libuser-0.60-7.ael7b_1, libuser-0.60-7.el7_1, libuser-0.60-7.el7_1.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 7) libuser-devel-0.60-7.ael7b_1, libuser-devel-0.60-7.el7_1, libuser-devel-0.60-7.el7_1.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libuser-0.60-7.el7_1, libuser-python-0.60-7.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 7) libuser-devel-0.60-7.el7_1
Fixes 2 records
Priority CRITICAL 92KEV
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) b…
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.08503 · Published 2015-08-11 · Partial fix CWE-367
Priority LOW 20
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.05391 · Published 2015-08-11 · Partial fix CWE-20
