Summary
It was discovered that AccountsService called a helper incorrectly when
performing password change operations. A local attacker could possibly use
this issue to obtain encrypted passwords.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | accountsservice | 0.6.55-0ubuntu12~20.04.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | accountsservice | 22.07.5-2ubuntu1.5 |
Vulnerabilities 1
-
Unscored —
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a …
References
-
report
https://ubuntu.com/security/CVE-2012-6655