17 matches found
CVE-2021-3560-exploit
CVE-2021-3560 — Polkit 권한 상승 CVE-2021-3560은 Linux 데스크톱 환경에서 사용되는 권한 부여 프레임워크인 Polkit이전 PolicyKit의 로컬 권한 상승 취약점입니다. 로컬의 권한이 없는 공격자는 accounts-daemon D-Bus 인터페이스의 경쟁 조건을 악용하여 권한이 있는 사용자를 생성하고, 암호를 설정한 후 궁극적으로 root 액세스 권한을 얻을 수 있습니다. 작동 방식 배경: Polkit + accounts-daemon accounts-daemon...
ptrace_may_dream
ptracemaydream CVE-2026-46333 pidfdgetfd2의 ptracemayaccess mm=NULL 경쟁 조건을 이용한 로컬 권한 상승 익스플로잇. 프로세스가 종료되는 동안 해당 mm이 이미 해제된 경우, 커널은 ptrace 접근 검사를 완전히 건너뜁니다. pidfdgetfd를 프로세스 종료와 경쟁시켜, 권한이 없는 사용자가 권한 있는 프로세스의 열린 파일 디스크립터를 가로챌 수 있습니다. 이 익스플로잇은 accounts-daemon을 대상으로 합니다. SetIconFile을 통해 수명이 짧은 자식 프로세스...
Polkit-CVE-2021-3560
Polkit-CVE-2021-3560 Предыстория В начале 2021 года исследователь по имени Кевин Бэкхаус обнаружил семилетнюю уязвимость повышения привилегий впоследствии обозначенную CVE-2021-3560 в утилите polkit в Linux. К счастью, разные дистрибутивы Linux и даже разные версии одних и тех же дистрибутивов...
CVE-2026-16743
The CVE-2026-16743 entry concerns accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop done by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to...
EUVD-2026-48570
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
AZL-43453 CVE-2023-3297 affecting package accountsservice 0.6.55-4
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
Double free
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
SUSE CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
UBUNTU-CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
Denial Of Service (DoS)
gdm3 is vulnerable to denial of service DoS. The vulnerability is in gdm3 LPE due to unresponsive accounts-daemon.this could allow a local user to create a new privileged account...