Vendors / Libuser Project Records 3 All Threatist records
Exploited (KEV) 1
CVSS critical 0
CVSS high 1
Exploited now Libuser Project records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 92KEV
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) b…
CVSS 3.1 HIGH 7.4· Local · No auth · No interaction · EPSS 0.08503 · Published 2015-08-11 · Partial fix CWE-367
Priority LOW 28
libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
CVSS 3.1 MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2019-11-25 · Will not fix CWE-367
Priority LOW 25
libuser has information disclosure when moving user's home directory
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00407 · Published 2019-11-25 · Will not fix CWE-200
Open these records in search → All records by CVSS severity
0 1 2 0 0
