CVE-2015-3245: Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7,...

Security readout for executives and security teams

CVE-2015-3245 lets a local user corrupt /etc/passwd through vulnerable libuser chfn handling. That can disrupt account management or logins. It is not a remote internet-facing bug based on the supplied sources, but it matters on shared Linux systems where untrusted users have local accounts. Exposure is most likely on older Red Hat or Fedora-family systems running vulnerable libuser/usermode packages where local users can invoke chfn through userhelper. Systems without local untrusted users have lower practical exposure. Treat this as a patch hygiene and shared-system resilience issue. It is not described as remotely exploitable, but passwd corruption can create operational outages. Prioritize older multi-user Linux systems and platforms with local third-party accounts. Mitigation focus: Update libuser to vendor-fixed packages referenced by Red Hat or Fedora advisories.; Prioritize shared servers, jump hosts, lab systems, and multi-user Linux environments.; Limit unnecessary local shell access until affected systems are patched..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.