An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | accountsservice | < 22.08.8-6 | accountsservice_22.08.8-6_all.deb |
Debian | 11 | all | accountsservice | < 0.6.55-3 | accountsservice_0.6.55-3_all.deb |
Debian | 10 | all | accountsservice | < 0.6.45-2 | accountsservice_0.6.45-2_all.deb |
Debian | 999 | all | accountsservice | < 23.13.9-6.1 | accountsservice_23.13.9-6.1_all.deb |
Debian | 13 | all | accountsservice | < 23.13.9-6.1 | accountsservice_23.13.9-6.1_all.deb |