Vulnerability in libuser - Denial of Service and Privilege Escalation
Summary
DLA-468-1: libuser - security update. Affects libuser versions < 1:0.56.9.dfsg.1-1.2+deb7u1. Fixed in 1:0.56.9.dfsg.1-1.2+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libuser is a library that provides a standardized interface for managing user and group accounts. It is used by various programs, including the usermode package. The library allows for the manipulation and administration of user accounts. However, two security vulnerabilities have been discovered in libuser that could lead to a denial of service or privilege escalation by local users.
Vulnerability Detail
The first vulnerability, identified as CVE-2015-3245, is an incomplete blacklist vulnerability in the chfn function of libuser. This vulnerability exists in versions before 0.56.13-8 and 0.60 before 0.60-7. It allows local users to cause a denial of service by corrupting the /etc/passwd file through the insertion of a newline character in the GECOS field.
The second vulnerability, CVE-2015-3246, is also present in versions before 0.56.13-8 and 0.60 before 0.60-7. This vulnerability allows local users to cause a denial of service by directly modifying the /etc/passwd file. By causing an error during the modification, the file state becomes inconsistent. When combined with CVE-2015-3245, this vulnerability can also lead to privilege escalation.
How To Fix
Minimum fixed version
1:0.56.9.dfsg.1-1.2+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libuserTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Two security vulnerabilities have been discovered in libuser that could lead to a denial of service or privilege escalation. It is crucial to upgrade the libuser and usermode packages to the recommended versions to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libuser →
FAQ
libuser is a library that provides a standardized interface for managing user and group accounts.
CVE-2015-3245 is an incomplete blacklist vulnerability in the chfn function of libuser that allows local users to cause a denial of service by corrupting the /etc/passwd file.
CVE-2015-3246 is a vulnerability in libuser that allows local users to cause a denial of service by directly modifying the /etc/passwd file.
These vulnerabilities can be exploited by local users to either cause a denial of service or gain privilege escalation.
To fix these vulnerabilities, it is recommended to upgrade to libuser 1:0.56.9.dfsg.1-1.2+deb7u1 and usermode 1.109-1+deb7u2.
Related vulnerabilities
Recent vulnerabilities recorded for libuser.
