Skip to content
OpenAdvisories

Product · Freedesktop

accountsservice

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.8
    CVE-2020-16127

    accountsservice .pam_environment infinite loop

    An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to…

    Freedesktop accountsservice accountsservice Ubuntu
  • Low 3.3
    CVE-2020-16126 Public exploit

    accountsservice drops ruid, allows unprivileged users to send it signals

    An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a…

    Freedesktop accountsservice accountsservice Ubuntu