Libuser Project - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2019-11-25.

Products

• Libuser - 3 CVEs

Newest CVEs of Libuser Project

• CVE-2012-5644 - CVSS 5.5 (medium), 2019-11-25: libuser has information disclosure when moving user's home directory
• CVE-2012-5630 - CVSS 6.3 (medium), 2019-11-25: libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
• CVE-2015-3246 - CVSS 7.4 (high), 2015-08-11: libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local…