USN-5439-1 — accountsservice vulnerability

Summary

Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped
privileges. A local user could possibly use this issue to cause
AccountsService to crash or stop responding, resulting in a denial of
service. (CVE-2022-1804)

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	accountsservice	22.07.5-2ubuntu1.3

Vulnerabilities 1

Medium 5.5

CVE-2022-1804

Accountsservice incorrectly drops privileges

accountsservice no longer drops permissions when writting .pam_environment

Ubuntu Linux accountsservice accountsservice Linux Ubuntu Azure Linux

Mar 25, 2025

References

report
https://ubuntu.com/security/CVE-2022-1804

accountsservice vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

Accountsservice incorrectly drops privileges

References