CVE-2015-3245 Denial of service in n/a
Local attackers can corrupt /etc/passwd causing denial of service by injecting newlines into the GECOS field via chfn.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-3245?
CVE-2015-3245 is a low-severity denial of service vulnerability in n/a, published on 11 Aug 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.
Weakness: CWE-20
Which versions are affected by CVE-2015-3245?
It affects 1 product.
Products include Redhat Libuser.
How do I fix CVE-2015-3245?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-3245 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-3245 exists.
Public exploit code: 1 Metasploit module and 3 Exploit-DB entries.
Sources
Also known as DEBIAN-CVE-2015-3245, GHSA-q4h8-6f3r-mvww, UBUNTU-CVE-2015-3245.