AccountsService vulnerability

2023-09-2500:00:00

ubuntu.com

ubuntu

esm

accountsservice

vulnerability

d-bus

denial of service

arbitrary code

CVSS3

8.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

accountsservice - query and manipulate user account information

Details

USN-6190-1 fixed a vulnerability in AccountsService. This update provides
the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and
Ubuntu 18.04 LTS.

Original advisory details:

Kevin Backhouse discovered that AccountsService incorrectly handled certain
D-Bus messages. A local attacker could use this issue to cause
AccountsService to crash, resulting in a denial of service, or possibly
execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchaccountsservice< 0.6.45-1ubuntu1.3+esm1UNKNOWN
Ubuntu18.04noarchaccountsservice< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchaccountsservice-dbgsym< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchgir1.2-accountsservice-1.0< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchlibaccountsservice-dev< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchlibaccountsservice-doc< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchlibaccountsservice0< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchlibaccountsservice0-dbgsym< 0.6.45-1ubuntu1.3UNKNOWN
Ubuntu18.04noarchlibaccountsservice0< 0.6.45-1ubuntu1.3+esm1UNKNOWN
Ubuntu16.04noarchaccountsservice< 0.6.40-2ubuntu11.6+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	accountsservice	< 0.6.45-1ubuntu1.3+esm1	UNKNOWN
Ubuntu	18.04	noarch	accountsservice	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	accountsservice-dbgsym	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	gir1.2-accountsservice-1.0	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	libaccountsservice-dev	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	libaccountsservice-doc	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	libaccountsservice0	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	libaccountsservice0-dbgsym	< 0.6.45-1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	libaccountsservice0	< 0.6.45-1ubuntu1.3+esm1	UNKNOWN
Ubuntu	16.04	noarch	accountsservice	< 0.6.40-2ubuntu11.6+esm1	UNKNOWN