252 matches found
PT-2026-64293
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...
USN-8580-2: AccountsService vulnerabilities
USN-8580-1 fixed vulnerabilities in AccountsService. This update provides the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly...
USN-8580-1 accountsservice vulnerabilities
It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could use this issue to execute arbitrary commands as an administrator. CVE-2026-61897 It was discovered that the Ubuntu-specific SetLanguage helpers for...
USN-8580-1: AccountsService vulnerabilities
It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could use this issue to execute arbitrary commands as an administrator. CVE-2026-61897 It was discovered that the Ubuntu-specific SetLanguage helpers for...
PT-2026-63319
Name of the Vulnerable Software and Affected Versions accountsservice versions prior to 23.13.9-8ubuntu7 Description Ubuntu-specific language helper scripts, specifically save-to-pam-env and update-langlist, fail to properly sanitize the LANGUAGE entry within the /.pam environment file. This inpu...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560-Polkit-Privilege-Esclation PoC Original rese...
Azure Linux 3.0 Security Update: accountsservice (CVE-2023-3297)
The version of accountsservice installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3297 advisory. - In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerabilit...
EUVD-2020-8092
Malware in sbrugna...
EUVD-2011-4335
Malware in sbrugna...
EUVD-2018-5966
Malware in sbrugna...
EUVD-2020-8093
Malware in sbrugna...
EUVD-2021-27152
Malware in sbrugna...
EUVD-2012-2717
Malware in sbrugna...
EUVD-2023-43972
Malicious code in bioql PyPI...
EUVD-2022-25083
Malicious code in bioql PyPI...
SUSE CVE-2022-1804
accountsservice no longer drops permissions when writting .pamenvironment...
AZL-66686 CVE-2022-1804 affecting package accountsservice 0.6.55-4
accountsservice no longer drops permissions when writting .pamenvironment...
CVE-2022-1804
accountsservice no longer drops permissions when writting .pamenvironment...
