Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jxh7-q7rm-43ww

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.

Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.

EPSS

Процентиль: 32%
0.00124
Низкий

7.8 High

CVSS3

Дефекты

CWE-590
CWE-763

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 4 лет назад

Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.

CVSS3: 7.8
nvd
около 4 лет назад

Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.

CVSS3: 7.8
debian
около 4 лет назад

Ubuntu-specific modifications to accountsservice (in patch file debian ...

CVSS3: 7.8
fstec
около 4 лет назад

Уязвимость модификации AccountsService (debian/patches/0010-set-language.patch) операционной системы Ubuntu, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 32%
0.00124
Низкий

7.8 High

CVSS3

Дефекты

CWE-590
CWE-763