CVE-2015-3246

A race condition in Red Hat's libuser allowed authenticated local users to corrupt /etc/passwd, causing denial of service or privilege escalation.

This vulnerability was actively exploited in the wild (KEV) and could be used for privilege escalation or denial of service. DIB organizations must ensure all Red Hat packages are patched to prevent attackers from escalating privileges or disrupting services. The failure highlights the risk of unpatched race conditions in core system utilities.

Shame score — The vulnerability was actively exploited in the wild and allowed privilege escalation, indicating a significant avoidable risk that was not mitigated by timely patching.