Denial Of Service (DoS)

accountsservice is vulnerable to denial of service DoS attacks. Fallbacklocale variable, pointing to static storage via SetLanguagedbus function allows attackers to cause denial of service conditions...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...