high8.1
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the acco…
Impact
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Accountsservice | before 23.13.9-2ubuntu2 before 22.08.8-1ubuntu7.1 before 22.07.5-2ubuntu1.4 before 0.6.55-0ubuntu12\~20.04.6 |
| Canonical | Ubuntu Linux | Versions 20.04, 22.04, 22.10, 23.04 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/2024182
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3297
- https://securitylab.github.com/advisories/GHSL-2023-139_accountsservice/
- https://ubuntu.com/security/notices/USN-6190-1
- https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/2024182
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3297
- https://securitylab.github.com/advisories/GHSL-2023-139_accountsservice/
- https://ubuntu.com/security/notices/USN-6190-1