← Back to CVE intelligence
CVE intelligence

CVE-2015-3245

Vulnerability intelligence

Published Aug 11, 2015Sources checked Nov 3, 2026
2.1LOWCVSS out of 10
What this means

Review the available evidence

CVE-2015-3245 and is rated Low severity with a CVSS score of 2.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

Public exploit: Cataloged public exploit.

CISA KEVNot listedBased on the latest collected catalog
EPSS5.4%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview

What is CVE-2015-3245?

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.

Source: NVD