Lucene search
UbuntuUSN-6190-1HistoryJun 28, 2023 - 12:00 a.m.
AccountsService vulnerability
2023-06-2800:00:00
ubuntu.com
38
ubuntu
accountsservice
vulnerability
d-bus messages
denial of service
arbitrary code
packages
releases
CVSS3
8.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8
Confidence
High
EPSS
0
Percentile
5.1%
Releases
- Ubuntu 23.04
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- accountsservice - query and manipulate user account information
Details
Kevin Backhouse discovered that AccountsService incorrectly handled certain
D-Bus messages. A local attacker could use this issue to cause
AccountsService to crash, resulting in a denial of service, or possibly
execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | accountsservice | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | accountsservice-dbgsym | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | gir1.2-accountsservice-1.0 | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libaccountsservice-dev | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libaccountsservice-doc | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libaccountsservice0 | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libaccountsservice0-dbgsym | < 22.08.8-1ubuntu7.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | accountsservice | < 22.08.8-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | accountsservice-dbgsym | < 22.08.8-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | gir1.2-accountsservice-1.0 | < 22.08.8-1ubuntu1.1 | UNKNOWN |
References
Related
cvelist
cvelist
CVE-2023-3297
2023-09-01 20:49:43
openvas
openvas
Ubuntu: Security Advisory (USN-6190-1)
2023-06-29 00:00:00
Ubuntu: Security Advisory (USN-6190-2)
2023-09-26 00:00:00
osv
osv
accountsservice vulnerability
2023-06-28 12:11:45
accountsservice vulnerability
2023-09-25 10:52:46
nessus
nessus
nvd
nvd
CVE-2023-3297
2023-09-01 21:15:07
prion
prion
Double free
2023-09-01 21:15:00
ubuntucve
ubuntucve
CVE-2023-3297
2023-06-28 00:00:00
cve
cve
CVE-2023-3297
2023-09-01 21:15:07
redhatcve
redhatcve
CVE-2023-3297
2023-06-30 07:47:40
debiancve
debiancve
CVE-2023-3297
2023-09-01 21:15:07
ubuntu
ubuntu
AccountsService vulnerability
2023-09-25 00:00:00
CVSS3
8.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8
Confidence
High
EPSS
0
Percentile
5.1%
Related for USN-6190-1