THREAT OPS › CVEs › CVE-2015-3246
CVE-2015-3246 — Red Hat Libuser Race Condition Vulnerability
Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.
Vulnerability details
- Affected productsLibuser
- KEV remediation due2026-09-09
Related reporting
- August 2026 CVE Landscaperecordedfuture
- [NVD] CVE-2015-3246 (MEDIUM 5.1) — libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issuenvd
- CISA Adds Six Known Exploited Vulnerabilities to Catalogcisa_advisories
- [CISA KEV] CVE-2015-3246 — Red Hat Libuser: Red Hat Libuser Race Condition Vulnerabilitycisa_kev
- UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operationstalos