CVE-2015-3246

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

CVSS v3.1 CNA

7.4 HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.50% chance of exploitation in the next 30 days, 95th percentile

CISA KEV

added 2026-08-26

Published

2015-08-11

Updated

2026-10-01

Proof-of-concept exploits (1)

• HORKimhab/CVE-2015-32460★ · 2026-08-27

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_p…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/44633
• https://www.exploit-db.com/exploits/37706

Security advisories

• http://rhn.redhat.com/errata/RHSA-2015-1482.html
• http://rhn.redhat.com/errata/RHSA-2015-1483.html
• https://access.redhat.com/articles/1537873
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
• http://www.securityfocus.com/bid/76022
• http://www.securitytracker.com/id/1033040
• https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agenti…

References

• CVE Record
• NVD entry