Ubuntu notice covers two libuser flaws enabling local denial of service and possible privilege escalation
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Medium
- Exploited
- Yes
- Sources
- 1
What happened
Ubuntu security notice USN-8987-1 reports two local flaws in libuser. CVE-2015-3245 is caused by improper validation of the GECOS field, which can corrupt the passwd file and cause denial of service. CVE-2015-3246 comes from libuser editing the passwd file in place, which can leave it inconsistent and enable denial of service or possible privilege escalation.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Install the libuser package update referenced in Ubuntu security notice USN-8987-1.
- Restrict local account access on multi-user systems until the update is applied.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products