[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-3246":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-27T05:51:03.152Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":35,"aliases":91,"duplicate_of":9,"upstream":93,"downstream":94,"duplicates":106,"related":107,"reserved_at":9,"published_at":109,"modified_at":110,"state":111,"summary":112,"references_raw":121,"kevs":193,"epss":204,"epss_history":206,"metrics":451,"affected":466},"CVE-2015-3246","libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-264","Permissions, Privileges, and Access Controls","Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","category","Obsolete",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-367","Time-of-check Time-of-use (TOCTOU) Race Condition","The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.","weakness","Incomplete","Base","Medium",[27,31],{"id":28,"name":29,"techniques":30},"CAPEC-27","Leveraging Race Conditions via Symbolic Links",[],{"id":32,"name":33,"techniques":34},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[36,45,62,72],{"_key":37,"name":38,"source":39,"url":40,"maturity":41,"reliability_score":42,"verified":43,"type":9,"platforms":44,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_6B47E650EE9B0B70","Exploit Reference (qualys.com)","reference","https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt","unknown",0.2,false,[],{"_key":46,"name":47,"source":48,"url":49,"maturity":50,"reliability_score":51,"verified":52,"type":53,"platforms":54,"requires_auth":9,"exploitdb":56,"metasploit":9},"37706","Libuser Library - Multiple Vulnerabilities","exploit-database","https://www.exploit-db.com/exploits/37706","poc",0.8,true,"dos",[55],"linux",{"verified":52,"type":53,"platform":55,"file":57,"codes":58},"exploits/linux/dos/37706.txt",[7,59,60,61],"CVE-2015-3245","OSVDB-125264","OSVDB-125263",{"_key":63,"name":64,"source":48,"url":65,"maturity":66,"reliability_score":51,"verified":52,"type":67,"platforms":68,"requires_auth":9,"exploitdb":69,"metasploit":9},"44633","Libuser - 'roothelper' Local Privilege Escalation (Metasploit)","https://www.exploit-db.com/exploits/44633","weaponized","local",[55],{"verified":52,"type":67,"platform":55,"file":70,"codes":71},"exploits/linux/local/44633.rb",[7,59],{"_key":73,"name":74,"source":75,"url":76,"maturity":66,"reliability_score":77,"verified":52,"type":78,"platforms":79,"requires_auth":52,"exploitdb":9,"metasploit":80},"MSF_EXPLOIT_LINUX_LOCAL_LIBUSER_ROOTHELPER_PRIV_ESC","Libuser roothelper Privilege Escalation","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/local/libuser_roothelper_priv_esc.rb",0.8333333333333334,"remote",[],{"fullname":81,"rank":82,"rank_name":83,"post_auth":52,"check":52,"notes":84},"exploit/linux/local/libuser_roothelper_priv_esc",500,"great",{"Stability":85,"SideEffects":87,"Reliability":89},[86],"service-resource-loss",[88],"artifacts-on-disk",[90],"repeatable-session",[92],"DEBIAN-CVE-2015-3246",[],[95,97,99,100,102,104],{"_key":96},"DLA-468-1",{"_key":98},"MGASA-2015-0278",{"_key":92},{"_key":101},"UBUNTU-CVE-2015-3246",{"_key":103},"RHSA-2015:1482",{"_key":105},"RHSA-2015:1483",[],[108],{"_key":98},"2015-08-11T14:00:00.000Z","2026-08-27T03:56:42.310Z","Analyzed",{"cisa_kev":52,"cisa_ransomware":43,"cisa_vendor":113,"epss_severity":114,"epss_score":115,"severity":116,"severity_score":117,"severity_version":118,"severity_source":119,"severity_vector":120,"severity_status":111},"Red Hat","low",0.07092,"high",7.2,"v2.0","nvd","AV:L/AC:L/Au:N/C:C/I:C/A:C",[122,130,137,143,149,154,158,164,168,173,177,183,187],{"url":123,"sources":124,"tags":126},"http://www.securityfocus.com/bid/76022",[125,119],"cve.org",[127,128,129],"VDB Entry","X Refsource BID","Third Party Advisory",{"url":131,"sources":132,"tags":133},"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html",[125,119],[134,135,136],"Vendor Advisory","X Refsource FEDORA","Broken Link",{"url":138,"sources":139,"tags":140},"https://www.exploit-db.com/exploits/44633/",[125,119],[141,142,129,127],"Exploit","X Refsource EXPLOIT DB",{"url":144,"sources":145,"tags":146},"https://access.redhat.com/articles/1537873",[125,119],[147,148,134],"X Refsource CONFIRM","Mitigation",{"url":150,"sources":151,"tags":152},"http://rhn.redhat.com/errata/RHSA-2015-1482.html",[125,119],[134,153],"X Refsource REDHAT",{"url":155,"sources":156,"tags":157},"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html",[125,119],[134,135,136],{"url":159,"sources":160,"tags":161},"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html",[125,119],[134,162,163,129],"X Refsource SUSE","Mailing List",{"url":40,"sources":165,"tags":166},[125,119],[167,141],"X Refsource MISC",{"url":169,"sources":170,"tags":171},"http://www.securitytracker.com/id/1033040",[125,119],[127,172,129],"X Refsource SECTRACK",{"url":174,"sources":175,"tags":176},"http://rhn.redhat.com/errata/RHSA-2015-1483.html",[125,119],[134,153],{"url":178,"sources":179,"tags":181},"https://security-tracker.debian.org/tracker/CVE-2015-3246",[180],"osv_debian",[182],"Advisory",{"url":184,"sources":185,"tags":186},"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/",[125,119],[129],{"url":188,"sources":189,"tags":190},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246",[125,119],[191,192],"Government Resource","US Government Resource",[194],{"source":195,"vendor":113,"product":196,"date_added":197,"vulnerability_name":198,"short_description":199,"required_action":200,"due_date":201,"known_ransomware_campaign_use":202,"notes":203,"exploitation_type":9},"cisa","Libuser","2026-08-26","Red Hat Libuser Race Condition Vulnerability","Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation. ","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-09","Unknown","This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://access.redhat.com/articles/1537873 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3246",{"date":197,"score":115,"percentile":205},0.93742,[207,211,213,216,219,221,223,226,228,231,233,236,238,241,244,247,250,253,256,259,262,264,267,270,273,276,279,281,285,287,289,292,295,298,301,304,307,310,313,316,319,322,324,326,329,331,333,336,340,343,345,348,351,354,357,359,362,365,368,371,374,377,380,382,384,386,388,390,392,394,396,398,401,403,406,409,412,414,417,419,422,425,428,431,434,436,439,442,445,448],{"date":208,"score":209,"percentile":210},"2025-11-04",0.18917,0.95041,{"date":212,"score":209,"percentile":210},"2025-11-05",{"date":214,"score":209,"percentile":215},"2025-11-06",0.95042,{"date":217,"score":209,"percentile":218},"2025-11-07",0.95045,{"date":220,"score":209,"percentile":215},"2025-11-08",{"date":222,"score":209,"percentile":215},"2025-11-09",{"date":224,"score":209,"percentile":225},"2025-11-10",0.95043,{"date":227,"score":209,"percentile":218},"2025-11-11",{"date":229,"score":209,"percentile":230},"2025-11-12",0.95047,{"date":232,"score":209,"percentile":230},"2025-11-13",{"date":234,"score":209,"percentile":235},"2025-11-14",0.95048,{"date":237,"score":209,"percentile":218},"2025-11-15",{"date":239,"score":209,"percentile":240},"2025-11-16",0.95049,{"date":242,"score":209,"percentile":243},"2025-11-17",0.9505,{"date":245,"score":209,"percentile":246},"2025-11-18",0.94868,{"date":248,"score":209,"percentile":249},"2025-11-19",0.9487,{"date":251,"score":209,"percentile":252},"2025-11-20",0.94875,{"date":254,"score":209,"percentile":255},"2025-11-21",0.95059,{"date":257,"score":209,"percentile":258},"2025-11-22",0.95057,{"date":260,"score":209,"percentile":261},"2025-11-23",0.95058,{"date":263,"score":209,"percentile":255},"2025-11-24",{"date":265,"score":209,"percentile":266},"2025-11-25",0.95062,{"date":268,"score":209,"percentile":269},"2025-11-26",0.95063,{"date":271,"score":209,"percentile":272},"2025-11-27",0.95066,{"date":274,"score":209,"percentile":275},"2025-11-28",0.95065,{"date":277,"score":209,"percentile":278},"2025-11-29",0.95069,{"date":280,"score":209,"percentile":272},"2025-11-30",{"date":282,"score":283,"percentile":284},"2025-12-01",0.18666,0.95061,{"date":286,"score":283,"percentile":284},"2025-12-02",{"date":288,"score":283,"percentile":284},"2025-12-03",{"date":290,"score":283,"percentile":291},"2025-12-04",0.95017,{"date":293,"score":283,"percentile":294},"2025-12-05",0.9502,{"date":296,"score":283,"percentile":297},"2025-12-06",0.95021,{"date":299,"score":283,"percentile":300},"2025-12-07",0.95025,{"date":302,"score":283,"percentile":303},"2025-12-08",0.95024,{"date":305,"score":283,"percentile":306},"2025-12-09",0.95028,{"date":308,"score":283,"percentile":309},"2025-12-10",0.95034,{"date":311,"score":283,"percentile":312},"2025-12-11",0.95038,{"date":314,"score":283,"percentile":315},"2025-12-12",0.9504,{"date":317,"score":283,"percentile":318},"2025-12-13",0.95039,{"date":320,"score":283,"percentile":321},"2025-12-14",0.95037,{"date":323,"score":283,"percentile":210},"2025-12-15",{"date":325,"score":283,"percentile":225},"2025-12-16",{"date":327,"score":283,"percentile":328},"2025-12-17",0.95046,{"date":330,"score":283,"percentile":240},"2025-12-18",{"date":332,"score":283,"percentile":243},"2025-12-19",{"date":334,"score":283,"percentile":335},"2025-12-20",0.95051,{"date":337,"score":338,"percentile":339},"2025-12-21",0.21424,0.95511,{"date":341,"score":338,"percentile":342},"2025-12-22",0.95512,{"date":344,"score":338,"percentile":342},"2025-12-23",{"date":346,"score":338,"percentile":347},"2025-12-24",0.95516,{"date":349,"score":338,"percentile":350},"2025-12-25",0.95519,{"date":352,"score":338,"percentile":353},"2025-12-26",0.9552,{"date":355,"score":338,"percentile":356},"2025-12-27",0.95539,{"date":358,"score":338,"percentile":347},"2025-12-28",{"date":360,"score":338,"percentile":361},"2025-12-29",0.95517,{"date":363,"score":338,"percentile":364},"2025-12-30",0.95518,{"date":366,"score":338,"percentile":367},"2025-12-31",0.95522,{"date":369,"score":338,"percentile":370},"2026-01-01",0.95559,{"date":372,"score":338,"percentile":373},"2026-01-02",0.95554,{"date":375,"score":338,"percentile":376},"2026-01-03",0.95551,{"date":378,"score":338,"percentile":379},"2026-01-04",0.95515,{"date":381,"score":338,"percentile":339},"2026-01-05",{"date":383,"score":338,"percentile":342},"2026-01-06",{"date":385,"score":338,"percentile":342},"2026-01-07",{"date":387,"score":338,"percentile":379},"2026-01-08",{"date":389,"score":338,"percentile":361},"2026-01-09",{"date":391,"score":338,"percentile":361},"2026-01-10",{"date":393,"score":338,"percentile":379},"2026-01-11",{"date":395,"score":338,"percentile":347},"2026-01-12",{"date":397,"score":338,"percentile":379},"2026-01-13",{"date":399,"score":338,"percentile":400},"2026-01-14",0.95521,{"date":402,"score":338,"percentile":400},"2026-01-15",{"date":404,"score":338,"percentile":405},"2026-01-16",0.95523,{"date":407,"score":338,"percentile":408},"2026-01-17",0.95525,{"date":410,"score":338,"percentile":411},"2026-01-18",0.95528,{"date":413,"score":338,"percentile":408},"2026-01-19",{"date":415,"score":338,"percentile":416},"2026-01-20",0.95526,{"date":418,"score":338,"percentile":411},"2026-01-21",{"date":420,"score":338,"percentile":421},"2026-01-22",0.95531,{"date":423,"score":338,"percentile":424},"2026-01-23",0.95536,{"date":426,"score":338,"percentile":427},"2026-01-24",0.9554,{"date":429,"score":338,"percentile":430},"2026-01-25",0.95544,{"date":432,"score":338,"percentile":433},"2026-01-26",0.95545,{"date":435,"score":338,"percentile":433},"2026-01-27",{"date":437,"score":338,"percentile":438},"2026-01-28",0.95547,{"date":440,"score":338,"percentile":441},"2026-01-29",0.9555,{"date":443,"score":338,"percentile":444},"2026-01-30",0.95552,{"date":446,"score":338,"percentile":447},"2026-01-31",0.95555,{"date":449,"score":338,"percentile":450},"2026-02-01",0.95585,[452,462,464],{"source":119,"cvss_v2_0":453,"cvss_v3_0":9,"cvss_v3_1":456,"cvss_v4_0":9},{"baseScore":117,"baseSeverity":9,"vectorString":120,"impactScore":454,"exploitabilityScore":455},10,3.9,{"baseScore":457,"baseSeverity":458,"vectorString":459,"impactScore":460,"exploitabilityScore":461},5.1,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",6,3.6,{"source":125,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":463,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":458,"vectorString":459,"impactScore":460,"exploitabilityScore":461},{"source":180,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":457,"baseSeverity":9,"vectorString":459,"impactScore":460,"exploitabilityScore":461},[467,481,494,500,511],{"ecosystem":468,"name":469,"vendor":470,"product":469,"cpe_part":9,"purl_type":471,"purl_namespace":470,"purl_name":469,"source":9,"versions":472},"Debian","libuser","debian","deb",[473,478,479,480],{"version":474,"is_range":52,"range_type":475,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":477,"fixed_in":9},"lt1:0_62~dfsg_0_1","ecosystem","1:0.62~dfsg-0.1","excluding",{"version":474,"is_range":52,"range_type":475,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":477,"fixed_in":9},{"version":474,"is_range":52,"range_type":475,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":477,"fixed_in":9},{"version":474,"is_range":52,"range_type":475,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":477,"fixed_in":9},{"ecosystem":9,"name":469,"vendor":482,"product":469,"cpe_part":483,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":484},"libuser_project","a",[485,489],{"version":486,"is_range":52,"range_type":487,"version_start":9,"version_start_type":9,"version_end":488,"version_end_type":477,"fixed_in":9},"lt0.56.13-8","cpe","0.56.13-8",{"version":490,"is_range":52,"range_type":487,"version_start":491,"version_start_type":492,"version_end":493,"version_end_type":477,"fixed_in":9},"gte0.60_lt0.60-7","0.60","including","0.60-7",{"ecosystem":9,"name":495,"vendor":495,"product":495,"cpe_part":496,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":497},"opensuse","o",[498],{"version":499,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"13.2",{"ecosystem":9,"name":501,"vendor":502,"product":503,"cpe_part":496,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":504},"enterprise linux","redhat","enterprise_linux",[505,507,509],{"version":506,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.0",{"version":508,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0",{"version":510,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"ecosystem":9,"name":469,"vendor":502,"product":469,"cpe_part":483,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":512},[513,516,518,520,522,524,526],{"version":514,"is_range":52,"range_type":487,"version_start":9,"version_start_type":9,"version_end":515,"version_end_type":492,"fixed_in":9},"lte0.56.13-5","0.56.13-5",{"version":517,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-1",{"version":519,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-2",{"version":521,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-3",{"version":523,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-4",{"version":525,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-5",{"version":527,"is_range":43,"range_type":487,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"0.60-6"]