CVE-2023-3297

2023-06-3007:47:40

redhat.com

access.redhat.com

vulnerability

accountsservice

d-bus

local attacker

root privileges

CVSS3

8.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

A vulnerability was found in accountsservice. An unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process. Though exploitation is likely to be difficult, this issue could enable a local unprivileged attacker to gain root privileges.