Libuser

This hub aggregates every CVE we track for Libuser, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Libuser.

• CVE-2012-5644libuser has information disclosure when moving user's home directory5.5Nov 25, 2019
• CVE-2012-5630libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.6.3Nov 25, 2019
• CVE-2015-3246libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inc...7.2Aug 11, 2015
• CVE-2015-3245Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a ...2.1Aug 11, 2015
• CVE-2011-0002libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.6.4Jan 22, 2011