| Package | Affected versions | Patched versions |
|---|---|---|
| libuser | = 0.60-1= 0.60-2= 0.60-3= 0.60-4= 0.60-5= 0.60-6≤ 0.56.13-5 |
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free