Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-3297

Опубликовано: 28 июн. 2023
Источник: redhat
CVSS3: 8.4

Описание

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

A vulnerability was found in accountsservice. An unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process. Though exploitation is likely to be difficult, this issue could enable a local unprivileged attacker to gain root privileges.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7accountsserviceNot affected
Red Hat Enterprise Linux 8accountsserviceNot affected
Red Hat Enterprise Linux 9accountsserviceNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2218566accountsservice: use-after-free via a D-Bus message to the accounts-daemon process

8.4 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 2 лет назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

CVSS3: 8.1
nvd
больше 2 лет назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

CVSS3: 7.8
msrc
12 месяцев назад

Описание отсутствует

CVSS3: 8.1
debian
больше 2 лет назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger ...

CVSS3: 8.1
github
больше 2 лет назад

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

8.4 High

CVSS3