CVE-2015-3245

LOW2.1Published on August 11, 2015

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.

CVSS score2.1 / 10AV:L/AC:L/Au:N/C:N/I:N/A:P

Weakness type (CWE)CWE-20

Vendorsredhat

Affected products

Vendors	Prodotto	Versioni
redhat	libuser	<= 0.56.13-5

SPECTRE, la backdoor che spegne gli EDR: dentro l’arsenale di UAT-10147

APT

SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal

Recently, Cisco Talos published a two-part analysis of the Chinese-speaking group UAT-10147 , which is active against Windows and Linux web servers on a

Aug 24, 20267 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal