AccountsService Ubuntu DoS

The vulnerability of the AccountsService account service in the Ubuntu operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure...

Privilege Escalation

accountsservice is vulnerable to privilege escalation. The vulnerability exists because the library does not check permission whet writes to .pamenvironment...

Ubuntu: Security Advisory (USN-5439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5439-1: AccountsService vulnerability

Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or stop responding, resulting in a denial of service. CVE-2022-1804...

USN-5439-1 accountsservice vulnerability

Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or stop responding, resulting in a denial of service. CVE-2022-1804...

UBUNTU-CVE-2022-1804

accountsservice no longer drops permissions when writting .pamenvironment...

PT-2022-3233

Name of the Vulnerable Software and Affected Versions AccountsService affected versions not specified Description The issue is related to insufficient access control in the AccountsService of the Ubuntu operating system. It may allow an attacker to cause a denial of service. The problem is that...

Ubuntu 22.04 LTS : AccountsService vulnerability (USN-5439-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5439-1 advisory. Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or...

Ubuntu AccountsService 安全漏洞

Ubuntu AccountsService is an individual developer's software for managing accounts on Linux. The software provides query and manipulation functionality for accounts, plus a set of APIs based on commands such as useradd, usermod, and others. Ubuntu AccountsService suffers from a security...

CVE-2022-1804

accountsservice no longer drops permissions when writting .pamenvironment...

new packages: accountsservice

An update is available for accountsservice. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ALBA-2022:1800 accountsservice bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

accountsservice bug fix and enhancement update

An update is available for accountsservice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

accountsservice bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Exploit for Incorrect Authorization in Polkit_Project Polkit

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalatio...

accountsservice bug fix and enhancement update

The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information. It is based on the useradd, usermod, and userdel commands. Bug Fixes and Enhancements: HP WS AlmaLinux 8.5 bug Desktop presentation changes between reboots when logging in as roo...

accountsservice bug fix and enhancement update

An update is available for accountsservice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The accountsservice project provides a set of D-Bus interfaces for...

PT-2021-1398

Name of the Vulnerable Software and Affected Versions: accountsservice affected versions not specified Description: The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information. It is based on the useradd, usermod, and userdel commands. A b...

Denial Of Service (DoS)

accountsservice is vulnerable to denial of service DoS attacks. Fallbacklocale variable, pointing to static storage via SetLanguagedbus function allows attackers to cause denial of service conditions...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...