Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37qh-6xc5-7fm4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.

EPSS

Процентиль: 46%
0.00541
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 6 лет назад

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.

CVSS3: 3.3
nvd
около 6 лет назад

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.

CVSS3: 3.3
debian
около 6 лет назад

An Ubuntu-specific modification to AccountsService in versions before ...

CVSS3: 5.5
altlinux
больше 7 лет назад

ALT-PU-2019-2323: package `accountsservice` update to version 0.6.55-alt1

EPSS

Процентиль: 46%
0.00541
Низкий