Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-3297

Опубликовано: 28 июн. 2023
Источник: redhat
CVSS3: 8.4
EPSS Низкий

Описание

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

A vulnerability was found in accountsservice. An unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process. Though exploitation is likely to be difficult, this issue could enable a local unprivileged attacker to gain root privileges.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7accountsserviceNot affected
Red Hat Enterprise Linux 8accountsserviceNot affected
Red Hat Enterprise Linux 9accountsserviceNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2218566accountsservice: use-after-free via a D-Bus message to the accounts-daemon process

EPSS

Процентиль: 26%
0.0033
Низкий

8.4 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 3 года назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

CVSS3: 8.1
nvd
почти 3 года назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

CVSS3: 8.1
msrc
больше 1 года назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice

CVSS3: 8.1
debian
почти 3 года назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger ...

CVSS3: 8.1
github
почти 3 года назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

EPSS

Процентиль: 26%
0.0033
Низкий

8.4 High

CVSS3