CVE-2015-3246

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

CVSS v3.1

5.1 MEDIUMCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.80% chance of exploitation in the next 30 days, 95th percentile

CISA KEV

added 2026-08-26

Published

2015-08-11

Updated

2026-08-27

Proof-of-concept exploits (1)

• HORKimhab/CVE-2015-3246

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_p…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/44633
• https://www.exploit-db.com/exploits/37706

References

• CVE Record
• NVD entry

Related

• CVE-2015-3245
• CVE-2015-3290
• CVE-2015-3239
• CVE-2015-3292
• CVE-2015-3224
• CVE-2015-3300