CVE-2015-3246: libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package,...

Security readout for executives and security teams

This flaw affects older Linux systems using libuser through userhelper. A local user could corrupt account database changes, creating an inconsistent /etc/passwd state and denial of service. The source also notes it can be chained with CVE-2015-3245 for privilege gain, so legacy systems with local users deserve attention. Exposure is most likely on older Red Hat, Fedora, or openSUSE-family Linux hosts with vulnerable libuser/usermode packages installed and local user access available. Internet exposure is not indicated by the provided sources. Treat as a legacy Linux patching priority where local users exist. The standalone issue is local denial of service, but the documented chain to privilege gain raises business risk on shared systems. Mitigation focus: Update libuser and usermode packages using vendor security advisories.; Review Red Hat, Fedora, and openSUSE guidance for affected package versions.; Prioritize multi-user systems, bastion hosts, and servers with shell access..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.